su: wants to search callers keyring.

Signed-off-by: Dominick Grift <domg472@gmail.com>
This commit is contained in:
Dominick Grift 2010-10-04 20:23:45 +02:00 committed by Chris PeBenito
parent 6a05763d51
commit 00a1438d82
1 changed files with 2 additions and 0 deletions

View File

@ -186,6 +186,8 @@ template(`su_role_template',`
allow $1_su_t self:netlink_audit_socket { nlmsg_relay create_netlink_socket_perms }; allow $1_su_t self:netlink_audit_socket { nlmsg_relay create_netlink_socket_perms };
allow $1_su_t self:key { search write }; allow $1_su_t self:key { search write };
allow $1_su_t $3:key search;
# Transition from the user domain to this domain. # Transition from the user domain to this domain.
domtrans_pattern($3, su_exec_t, $1_su_t) domtrans_pattern($3, su_exec_t, $1_su_t)