Skip to content

Commit

Permalink
Allow sysadm execute traceroute in sysadm_t domain using sudo
Browse files Browse the repository at this point in the history
When an unprivileged user in the sysadm_r role executes traceroute
through sudo, it transitions into sysadm_sudo_t domain by default.
With this commit, the process transitions back to sysadm_t.

Resolves: RHEL-9947
  • Loading branch information
zpytela committed Dec 12, 2023
1 parent 31c1f0d commit f9fb075
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions policy/modules/admin/sudo.if
Original file line number Diff line number Diff line change
Expand Up @@ -102,6 +102,7 @@ template(`sudo_role_template',`

optional_policy(`
netutils_domtrans($1_sudo_t)
netutils_run_traceroute($1_sudo_t, $2)
')

optional_policy(`
Expand Down

0 comments on commit f9fb075

Please sign in to comment.