From: russell@coker.com.au (Russell Coker) Date: Thu, 09 Feb 2017 12:21:03 +1100 Subject: [refpolicy] [PATCH] mon policy again In-Reply-To: References: <20170206051315.byxad4lugupfwykp@athena.coker.com.au> Message-ID: <9426666.198AGgbv89@russell.coker.com.au> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On Wednesday, 8 February 2017 5:18:20 PM AEDT Chris PeBenito wrote: > * Dropped the sudo for the time being (I realize it likely breaks > things) as the user role template isn't intended to be called like that. > A specific sudo for system use should be created in the sudo module Actually it's better to not use sudo in monitors, they have a standard method of using setuid wrappers. I have to support this in Debian/Stretch because it's too late to change some mon scripts but for the next version I won't. Thanks for merging it. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/