isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Call the approval plugin after the policy plugin accepts a command.

Browse Source 
Previously, for intercepted commands we only called the policy plugin.
This commit is contained in:
Todd C. Miller
2021-08-09 15:50:25 -06:00
parent 4ff3f7604d
commit 42598735d0
3 changed files with 14 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/sudo.c
View File

@@ -123,14 +123,12 @@ static void iolog_show_version(int verbose, int argc, char * const argv[],
static void unlink_plugin(struct plugin_container_list *plugin_list, struct plugin_container *plugin);
static void free_plugin_container(struct plugin_container *plugin, bool ioplugin);
/* Audit plugin convenience functions. */
/* Audit plugin convenience functions (some are public). */
static void audit_open(void);
static void audit_close(int exit_status, int error);
static void audit_show_version(int verbose);
/* Approval plugin convenience functions. */
static bool approval_check(char * const command_info[], char * const run_argv[],
char * const run_envp[]);
/* Approval plugin convenience functions (some are public). */
static void approval_show_version(int verbose);
sudo_dso_public int main(int argc, char *argv[], char *envp[]);
@@ -1832,7 +1830,7 @@ approval_show_version(int verbose)
* This is a "one-shot" plugin that has no open/close and is only
* called if the policy plugin accepts the command first.
*/
static bool
bool
approval_check(char * const command_info[], char * const run_argv[],
char * const run_envp[])
{