Problems with sudo

Richard Hally rhally at mindspring.com
Fri Dec 17 12:35:24 UTC 2004


Bogdan Agica wrote:

><snip>
>In the /etc/init.d script, the programs (5 of them) are started by
>comands like:
># sudo -u bitdefender /opt/BitDefender/bin/bdcored start
>
>I have looked at the files domains/program/sudo.te and
>macros/program/sudo_macros.te. Unfortunately, the lack of documentation
>for the sudo_domain() macro was a problem, so I have some questions:
>
>1. What exactly does the sudo_domain() macro do?
>2. Is this the tool that I need? (i have tried to integrate it with the
>policy, but it resulted in errors)
>  
>
<snip>

There is a program "runuser" in the coreutils package that was designed 
and written to be used in place of "su" and possibly "sudo" in this 
situation. See "man runuser" and postgresql for an example where it is used.
HTH
Richard Hally




More information about the fedora-selinux-list mailing list