Merge pull request #104 from fishilico/sudo-sigwinch

This commit is contained in:
Chris PeBenito 2019-09-14 16:22:40 -04:00
commit df6870c51b
1 changed files with 4 additions and 1 deletions

View File

@ -52,7 +52,7 @@ template(`sudo_role_template',`
#
# Use capabilities.
allow $1_sudo_t self:capability { chown dac_override fowner setgid setuid sys_nice sys_resource };
allow $1_sudo_t self:capability { chown dac_override fowner kill setgid setuid sys_nice sys_resource };
allow $1_sudo_t self:process { signal_perms getsched setsched getsession getpgid setpgid getcap setcap share getattr getrlimit rlimitinh siginh transition setsockcreate dyntransition noatsecure setkeycreate };
allow $1_sudo_t self:process { setexec setrlimit };
allow $1_sudo_t self:fd use;
@ -69,6 +69,9 @@ template(`sudo_role_template',`
allow $1_sudo_t $3:key search;
# Transmit SIGWINCH to children
allow $1_sudo_t $3:process signal;
# Enter this derived domain from the user domain
domtrans_pattern($3, sudo_exec_t, $1_sudo_t)