diff --git a/policy/modules/admin/sudo.if b/policy/modules/admin/sudo.if index 186ddb6f1..c1459364b 100644 --- a/policy/modules/admin/sudo.if +++ b/policy/modules/admin/sudo.if @@ -52,7 +52,7 @@ template(`sudo_role_template',` # # Use capabilities. - allow $1_sudo_t self:capability { chown dac_override fowner setgid setuid sys_nice sys_resource }; + allow $1_sudo_t self:capability { chown dac_override fowner kill setgid setuid sys_nice sys_resource }; allow $1_sudo_t self:process { signal_perms getsched setsched getsession getpgid setpgid getcap setcap share getattr getrlimit rlimitinh siginh transition setsockcreate dyntransition noatsecure setkeycreate }; allow $1_sudo_t self:process { setexec setrlimit }; allow $1_sudo_t self:fd use;