[refpolicy] [ patch 35/44] su: search parent.
Dominick Grift
domg472 at gmail.com
Mon Oct 4 13:23:47 CDT 2010
Signed-off-by: Dominick Grift <domg472 at gmail.com>
---
:100644 100644 800852f... e108d2a... M policy/modules/admin/su.if
policy/modules/admin/su.if | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
diff --git a/policy/modules/admin/su.if b/policy/modules/admin/su.if
index 800852f..e108d2a 100644
--- a/policy/modules/admin/su.if
+++ b/policy/modules/admin/su.if
@@ -338,5 +338,6 @@ interface(`su_exec',`
type su_exec_t;
')
+ corecmd_search_bin($1)
can_exec($1, su_exec_t)
')
--
1.7.2.3
More information about the refpolicy
mailing list