RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #104 from fishilico/sudo-sigwinch

This commit is contained in:
Chris PeBenito 2019-09-14 16:22:40 -04:00
parent faaa9b3d0b 1097ce0e24
commit df6870c51b
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
policy/modules/admin/sudo.if
View File

@ -52,7 +52,7 @@ template(`sudo_role_template',`
# #
# Use capabilities. # Use capabilities.
allow $1_sudo_t self:capability { chown dac_override fowner setgid setuid sys_nice sys_resource }; allow $1_sudo_t self:capability { chown dac_override fowner kill setgid setuid sys_nice sys_resource };
allow $1_sudo_t self:process { signal_perms getsched setsched getsession getpgid setpgid getcap setcap share getattr getrlimit rlimitinh siginh transition setsockcreate dyntransition noatsecure setkeycreate }; allow $1_sudo_t self:process { signal_perms getsched setsched getsession getpgid setpgid getcap setcap share getattr getrlimit rlimitinh siginh transition setsockcreate dyntransition noatsecure setkeycreate };
allow $1_sudo_t self:process { setexec setrlimit }; allow $1_sudo_t self:process { setexec setrlimit };
allow $1_sudo_t self:fd use; allow $1_sudo_t self:fd use;
@ -69,6 +69,9 @@ template(`sudo_role_template',`
allow $1_sudo_t $3:key search; allow $1_sudo_t $3:key search;
# Transmit SIGWINCH to children
allow $1_sudo_t $3:process signal;
# Enter this derived domain from the user domain # Enter this derived domain from the user domain
domtrans_pattern($3, sudo_exec_t, $1_sudo_t) domtrans_pattern($3, sudo_exec_t, $1_sudo_t)