Layer: admin

Module: sudo

Interfaces Templates

Description:

Execute a command with a substitute user


Interfaces:

sudo_sigchld( domain )
Summary

Send a SIGCHLD signal to the sudo domain.

Parameters
Parameter:Description:
domain

Domain allowed access.

Return

Templates:

can_exec_sudo( domain )
Summary

Execute sudo_exec_t without a domain transition

Description

This interface allows a domain to execute sudo_exec_t without a domain transition. It is for daemons that already have setuid access but are running as uid != 0.

Parameters
Parameter:Description:
domain

The domain that can execute sudo.

sudo_role_template( role_prefix , user_role , user_domain )
Summary

The role template for the sudo module.

Description

This template creates a derived domain which is allowed to change the linux user id, to run commands as a different user.

Parameters
Parameter:Description:
role_prefix

The prefix of the user role (e.g., user is the prefix for user_r).

user_role

The user role.

user_domain

The user domain associated with the role.

Return