Daniel J Walsh wrote: > I don't recall, I wrote it several years ago. I guess the simplest > thing is to try it out, without the fork. Seems to work fine without the fork. I've made quite a few changes and you can now specify sudoers lines like: tmiller ALL=(ALL) ROLE=sysadm_r TYPE=sysadmin_t /bin/sh and have it do what (I think) you want. Note that "make install" does not currently set the label on sesh, perhaps it should. I'm also not sure that /usr/sbin is the best place for sesh. My inclination would be to put it in /usr/libexec, though this is not a big deal. - todd -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
