su: wants to search callers keyring.

Signed-off-by: Dominick Grift <domg472@gmail.com>
2010-10-04 20:23:45 +02:00 · 2010-10-04 20:23:45 +02:00 · 00a1438d82
parent 6a05763d51
commit 00a1438d82
1 changed files with 2 additions and 0 deletions
--- a/policy/modules/admin/su.if
+++ b/policy/modules/admin/su.if
@ -186,6 +186,8 @@ template(`su_role_template',`
 	allow $1_su_t self:netlink_audit_socket { nlmsg_relay create_netlink_socket_perms };
 	allow $1_su_t self:key { search write };

+	allow $1_su_t $3:key search;
+
 	# Transition from the user domain to this domain.
 	domtrans_pattern($3, su_exec_t, $1_su_t)