secure mode for sudo

Dominick Grift domg472 at gmail.com
Fri Jun 19 09:28:41 UTC 2009


Why does sudo not have a secure_mode boolean like su has?

if(secure_mode) {
	# Only allow transitions to unprivileged user domains.
	userdom_spec_domtrans_unpriv_users($1_sudo_t)
} else {
	# Allow transitions to all user domains
	userdom_spec_domtrans_all_users($1_sudo_t)
}
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
Url : http://lists.fedoraproject.org/pipermail/selinux/attachments/20090619/a8b2b953/attachment.bin 


More information about the selinux mailing list