summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTomas Mraz <tmraz@fedoraproject.org>2015-08-12 17:04:00 +0200
committerTomas Mraz <tmraz@fedoraproject.org>2015-08-12 17:04:00 +0200
commitf655b4b3a73cea7fb5d9e905617712281dc3c803 (patch)
tree31beccc4b24adf22e11516ef786c61b1642f33d5
parentbb506282825923b89d61e96e76e2f67c67374284 (diff)
pam_rootok: use rootok permission instead of passwd permission in SELinux check.
* modules/pam_rootok/pam_rootok.c (selinux_check_root): Use rootok instead of passwd permission.
-rw-r--r--modules/pam_rootok/pam_rootok.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/pam_rootok/pam_rootok.c b/modules/pam_rootok/pam_rootok.c
index 70579e5b..88bed0c9 100644
--- a/modules/pam_rootok/pam_rootok.c
+++ b/modules/pam_rootok/pam_rootok.c
@@ -106,7 +106,7 @@ selinux_check_root (void)
return status;
}
- status = selinux_check_access(user_context, user_context, "passwd", "passwd", NULL);
+ status = selinux_check_access(user_context, user_context, "passwd", "rootok", NULL);
selinux_set_callback(SELINUX_CB_LOG, old_callback);
freecon(user_context);