commit f655b4b3a73cea7fb5d9e905617712281dc3c803
Author: Tomas Mraz <tmraz(a)fedoraproject.org>
Date: Wed Aug 12 17:04:00 2015 +0200
pam_rootok: use rootok permission instead of passwd permission in SELinux check.
* modules/pam_rootok/pam_rootok.c (selinux_check_root): Use rootok instead of
passwd permission.
modules/pam_rootok/pam_rootok.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/modules/pam_rootok/pam_rootok.c b/modules/pam_rootok/pam_rootok.c
index 70579e5..88bed0c 100644
--- a/modules/pam_rootok/pam_rootok.c
+++ b/modules/pam_rootok/pam_rootok.c
@@ -106,7 +106,7 @@ selinux_check_root (void)
return status;
}
- status = selinux_check_access(user_context, user_context, "passwd",
"passwd", NULL);
+ status = selinux_check_access(user_context, user_context, "passwd",
"rootok", NULL);
selinux_set_callback(SELINUX_CB_LOG, old_callback);
freecon(user_context);
Show replies by date