Changeset 160

Show
Ignore:
Timestamp:
01/09/08 15:23:42 (11 months ago)
Author:
bwilliams
Message:

fixed su

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • branch/refpol-merged/src/selinux-policy-refpol/doc/policy.xml

    r159 r160  
    16451645</param> 
    16461646</template> 
    1647 <template name="su_per_role_template" lineno="162"> 
     1647<template name="su_per_role_template" lineno="163"> 
    16481648<summary> 
    16491649The per role template for the su module. 
    …… 
    16781678</param> 
    16791679</template> 
    1680 <interface name="su_exec" lineno="316"> 
     1680<interface name="su_exec" lineno="320"> 
    16811681<summary> 
    16821682Execute su in the caller domain. 

  • branch/refpol-merged/src/selinux-policy-refpol/policy/modules/admin/su.if

    r156 r160  
    7676 
    7777        auth_domtrans_chk_passwd($1_su_t) 
    78         auth_dontaudit_read_shadow($1_su_t) 
     78        auth_domtrans_upd_passwd($1_su_t) 
     79        auth_read_shadow($1_su_t) 
    7980        auth_use_nsswitch($1_su_t) 
    8081        auth_rw_faillog($1_su_t) 
    …… 
    204205 
    205206        auth_domtrans_user_chk_passwd($1,$1_su_t) 
    206         auth_dontaudit_read_shadow($1_su_t) 
     207        auth_domtrans_upd_passwd($1_su_t) 
     208        auth_read_shadow($1_su_t) 
    207209        auth_use_nsswitch($1_su_t) 
    208210        auth_rw_faillog($1_su_t) 
     211 
     212        locallogin_search_keys($1_su_t) 
    209213 
    210214        corecmd_search_bin($1_su_t)