[linux-pam] pam_rootok: use rootok permission instead of passwd permission in SELinux check.

[Tomáš Mráz]

commit f655b4b3a73cea7fb5d9e905617712281dc3c803
Author: Tomas Mraz <tmraz(a)fedoraproject.org&gt;
Date:   Wed Aug 12 17:04:00 2015 +0200

    pam_rootok: use rootok permission instead of passwd permission in SELinux check.
    
    * modules/pam_rootok/pam_rootok.c (selinux_check_root): Use rootok instead of
    passwd permission.

 modules/pam_rootok/pam_rootok.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/modules/pam_rootok/pam_rootok.c b/modules/pam_rootok/pam_rootok.c
index 70579e5..88bed0c 100644
--- a/modules/pam_rootok/pam_rootok.c
+++ b/modules/pam_rootok/pam_rootok.c
@@ -106,7 +106,7 @@ selinux_check_root (void)
 	return status;
     }
 
-    status = selinux_check_access(user_context, user_context, "passwd",
"passwd", NULL);
+    status = selinux_check_access(user_context, user_context, "passwd",
"rootok", NULL);
 
     selinux_set_callback(SELINUX_CB_LOG, old_callback);
     freecon(user_context);