[Pam-developers] Use different way to check for passwd accessibility by root in pam_rootok
Dmitry V. Levin
ldv at altlinux.org
Fri Feb 8 00:58:21 UTC 2013
On Thu, Feb 07, 2013 at 05:15:11PM +0100, Tomas Mraz wrote:
> The attached patch uses different way to check for passwd accessibility
> by root in pam_rootok module. This method allows for proper auditing the
> denial of access, so the user can find the user AVC message in the
> audit.log.
>
> OK to commit?
I need a bit more time to review this, but from a cursory glance the
selinux_check_root() return code check needs to be inverted.
--
ldv
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/pam-developers/attachments/20130208/d0f4c092/attachment.sig>
More information about the Pam-developers
mailing list