2022-01-06 13:55:54 +00:00
|
|
|
policy_module(sudo)
|
2005-08-09 19:30:43 +00:00
|
|
|
|
2021-01-26 23:08:54 +00:00
|
|
|
## <desc>
|
|
|
|
|
## <p>
|
|
|
|
|
## Determine whether all sudo domains
|
|
|
|
|
## can connect to TCP HTTP ports. This
|
|
|
|
|
## is needed if an additional authentication
|
|
|
|
|
## mechanism via an HTTP server is
|
|
|
|
|
## required for users to use sudo.
|
|
|
|
|
## </p>
|
|
|
|
|
## </desc>
|
|
|
|
|
gen_tunable(sudo_all_tcp_connect_http_port, false)
|
|
|
|
|
|
2021-08-08 15:10:47 +00:00
|
|
|
## <desc>
|
|
|
|
|
## <p>
|
|
|
|
|
## Determine whether the user application exec
|
|
|
|
|
## domain attribute should be respected for sudo
|
|
|
|
|
## access. If not enabled, only user domains
|
|
|
|
|
## themselves may use sudo.
|
|
|
|
|
## </p>
|
|
|
|
|
## </desc>
|
|
|
|
|
gen_tunable(sudo_allow_user_exec_domains, false)
|
|
|
|
|
|
2005-08-09 19:30:43 +00:00
|
|
|
########################################
|
|
|
|
|
#
|
|
|
|
|
# Declarations
|
2009-07-28 14:29:11 +00:00
|
|
|
attribute sudodomain;
|
2005-08-09 19:30:43 +00:00
|
|
|
|
|
|
|
|
type sudo_exec_t;
|
2007-07-19 18:57:48 +00:00
|
|
|
application_executable_file(sudo_exec_t)
|
2021-01-26 23:08:54 +00:00
|
|
|
|
|
|
|
|
tunable_policy(`sudo_all_tcp_connect_http_port',`
|
|
|
|
|
corenet_tcp_connect_http_port(sudodomain)
|
|
|
|
|
')
|
