How do I make sudo "trusted"?

Stephen Smalley sds at epoch.ncsc.mil
Mon Mar 15 13:39:20 UTC 2004


On Thu, 2004-03-11 at 10:36, Stephen Smalley wrote:
> Even
> then, you still need to start from staff_r in order to reach sysadm_r;
> the policy doesn't allow user_r to transition to sysadm_r (if SELinux is
> in enforcing mode).

Ah, my mistake - the Fedora Core devel policy allows this transition
unless you disable the unlimitedUsers tunable.
 
-- 
Stephen Smalley <sds at epoch.ncsc.mil>
National Security Agency




More information about the fedora-selinux-list mailing list