[prev in list] [next in list] [prev in thread] [next in thread] 

List:       sudo-users
Subject:    Re: [sudo-users] Multiple I/O Plugins
From:       Bryan Christ <bryan.christ () gmail ! com>
Date:       2019-03-12 15:50:57
Message-ID: CAPQiZK8ttKo=ryscoFGdfx_zFDO-NtyY6uMCaoRU2-wv0oiLyw () mail ! gmail ! com
[Download RAW message or body]

For the benefit of all on this mailing list, I just wanted to confirm that
policy stacking in this manner *does* work.

On Fri, Mar 1, 2019 at 12:34 PM Bryan Christ <bryan.christ@gmail.com> wrote:

> Okay.  It seems like at face value it would work, but I thought I would
> check if you knew of any caveats.  I'll post back to this email and let you
> know if I end up going down that path.
>
> On Fri, Mar 1, 2019 at 12:23 PM Todd C. Miller <Todd.Miller@sudo.ws>
> wrote:
>
>> On Fri, 01 Mar 2019 12:05:47 -0600, Bryan Christ wrote:
>>
>> > On the policy plugin, since it only supports one, would it be
>> reasonable to:
>> >
>> > 1.  Do our logic inside policy_check() and then (if necessary)...
>> > 2.  Load the default plugin (via dlopen and friends)?
>> >
>> > Is there anything wrong with that approach?
>>
>> I haven't tried to stack policy modules in that way but I can't
>> think of any reason it wouldn't work.
>>
>>  - todd
>>
>
>
> --
> Bryan
> <><
>


-- 
Bryan
<><
____________________________________________________________
sudo-users mailing list <sudo-users@sudo.ws>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-users
[prev in list] [next in list] [prev in thread] [next in thread]