From 8b31782480816a1d97ffe266b74fb9b9ab903769 Mon Sep 17 00:00:00 2001 From: Kenton Groombridge Date: Wed, 15 May 2024 11:12:35 -0400 Subject: [PATCH] sudo: allow systemd-logind to read cgroup state of sudo Signed-off-by: Kenton Groombridge --- policy/modules/admin/sudo.if | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/admin/sudo.if b/policy/modules/admin/sudo.if index d4d1c12fe..0fe061361 100644 --- a/policy/modules/admin/sudo.if +++ b/policy/modules/admin/sudo.if @@ -204,6 +204,8 @@ template(`sudo_role_template',` ifdef(`init_systemd',` init_dbus_chat($1_sudo_t) + + systemd_read_logind_state($1_sudo_t) ') ')