blob: 6fc9dfc71fba5f915c76685be62fade13fbb3486 (
plain)
1
2
3
4
5
6
7
8
9
|
# Default extra run0 arguments injected by run0-sudo-shim.
# One argument per line; lines starting with '#' are comments.
#
# --via-shell routes the elevated command through the target's login shell so a
# normal execve runs it, letting SELinux exec type_transitions fire (e.g.
# pacman -> rpm_t via the run0_pacman policy module). Without it, run0
# setexeccon()s the binary directly and it lands in sysadm_systemd_t, which
# cannot write usr_t/lib_t.
--via-shell
|