Blame strict/domains/program/chkpwd.te
|
Chris PeBenito |
0fbfa5 |
#DESC Chkpwd - PAM password checking programs
|
|
Chris PeBenito |
0fbfa5 |
# X-Debian-Packages: libpam-modules
|
|
Chris PeBenito |
0fbfa5 |
#
|
|
Chris PeBenito |
0fbfa5 |
# Domains for the /sbin/.*_chkpwd utilities.
|
|
Chris PeBenito |
0fbfa5 |
#
|
|
Chris PeBenito |
0fbfa5 |
|
|
Chris PeBenito |
0fbfa5 |
#
|
|
Chris PeBenito |
0fbfa5 |
# chkpwd_exec_t is the type of the /sbin/.*_chkpwd executables.
|
|
Chris PeBenito |
0fbfa5 |
#
|
|
Chris PeBenito |
0fbfa5 |
type chkpwd_exec_t, file_type, sysadmfile, exec_type;
|
|
Chris PeBenito |
0fbfa5 |
|
|
Chris PeBenito |
0fbfa5 |
chkpwd_domain(system)
|
|
Chris PeBenito |
0fbfa5 |
dontaudit system_chkpwd_t privfd:fd use;
|
|
Chris PeBenito |
0fbfa5 |
role sysadm_r types system_chkpwd_t;
|
|
Chris PeBenito |
0fbfa5 |
in_user_role(system_chkpwd_t)
|
|
Chris PeBenito |
0fbfa5 |
|
|
Chris PeBenito |
0fbfa5 |
# Everything else is in the chkpwd_domain macro in
|
|
Chris PeBenito |
0fbfa5 |
# macros/program/chkpwd_macros.te.
|