Call the approval plugin after the policy plugin accepts a command.

Previously, for intercepted commands we only called the policy plugin.
This commit is contained in:
Todd C. Miller
2021-08-09 15:50:25 -06:00
parent 4ff3f7604d
commit 42598735d0
3 changed files with 14 additions and 12 deletions

View File

@@ -230,6 +230,8 @@ bool audit_reject(const char *plugin_name, unsigned int plugin_type,
const char *audit_msg, char * const command_info[]);
bool audit_error(const char *plugin_name, unsigned int plugin_type,
const char *audit_msg, char * const command_info[]);
bool approval_check(char * const command_info[], char * const run_argv[],
char * const run_envp[]);
extern const char *list_user;
extern struct user_details user_details;
extern int sudo_debug_instance;