su or sudo from unconfined user to confined user

[Dominick Grift]

On Tue, 2009-06-23 at 17:12 +0100, Mohamed Aburowais wrote:
> Hello,
> As creating new simple role, I've done the following:
> --------------
> policy_module(new, 0.0.1)
> 
> role newroled_r;
> role unconfined_r newroled_r; 
> ------------------
> But it does  not compile using make, showing error near role
> unconfined.

Sorry i was right the first time:

allow unconfined_r confined_r;

So:

role unconfined_r confined_r;

is wrong...

> 
> 
> > Subject: Re: su or sudo from unconfined user to confined user
> > From: domg472 at gmail.com
> > To: mrowais at hotmail.com
> > CC: fedora-selinux-list at redhat.com
> > Date: Tue, 23 Jun 2009 17:20:17 +0200
> > 
> > On Tue, 2009-06-23 at 17:17 +0200, Dominick Grift wrote:
> > 
> > > 2. Your source role must have access to your target role
> > > allow unconfined_r confined_r;
> > 
> > Whoops thats a syntax error. It should be:
> > 
> > role unconfined_r confined_r;
> 
> 
> ______________________________________________________________________
> Beyond Hotmail - see what else you can do with Windows Live. Find out
> more.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20090623/6484c4ef/attachment.sig>