diff options
author | Tomas Mraz <tmraz@fedoraproject.org> | 2015-08-12 17:04:00 +0200 |
---|---|---|
committer | Tomas Mraz <tmraz@fedoraproject.org> | 2015-08-12 17:04:00 +0200 |
commit | f655b4b3a73cea7fb5d9e905617712281dc3c803 (patch) | |
tree | 31beccc4b24adf22e11516ef786c61b1642f33d5 /modules/pam_rootok | |
parent | bb506282825923b89d61e96e76e2f67c67374284 (diff) | |
download | pam-f655b4b3a73cea7fb5d9e905617712281dc3c803.tar.gz pam-f655b4b3a73cea7fb5d9e905617712281dc3c803.tar.bz2 pam-f655b4b3a73cea7fb5d9e905617712281dc3c803.zip |
pam_rootok: use rootok permission instead of passwd permission in SELinux check.
* modules/pam_rootok/pam_rootok.c (selinux_check_root): Use rootok instead of
passwd permission.
Diffstat (limited to 'modules/pam_rootok')
-rw-r--r-- | modules/pam_rootok/pam_rootok.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/pam_rootok/pam_rootok.c b/modules/pam_rootok/pam_rootok.c index 70579e5b..88bed0c9 100644 --- a/modules/pam_rootok/pam_rootok.c +++ b/modules/pam_rootok/pam_rootok.c @@ -106,7 +106,7 @@ selinux_check_root (void) return status; } - status = selinux_check_access(user_context, user_context, "passwd", "passwd", NULL); + status = selinux_check_access(user_context, user_context, "passwd", "rootok", NULL); selinux_set_callback(SELINUX_CB_LOG, old_callback); freecon(user_context); |