[sudo-users] Multiple I/O Plugins

Bryan Christ bryan.christ at gmail.com
Tue Mar 12 09:50:57 MDT 2019


For the benefit of all on this mailing list, I just wanted to confirm that
policy stacking in this manner *does* work.

On Fri, Mar 1, 2019 at 12:34 PM Bryan Christ <bryan.christ at gmail.com> wrote:

> Okay.  It seems like at face value it would work, but I thought I would
> check if you knew of any caveats.  I'll post back to this email and let you
> know if I end up going down that path.
>
> On Fri, Mar 1, 2019 at 12:23 PM Todd C. Miller <Todd.Miller at sudo.ws>
> wrote:
>
>> On Fri, 01 Mar 2019 12:05:47 -0600, Bryan Christ wrote:
>>
>> > On the policy plugin, since it only supports one, would it be
>> reasonable to:
>> >
>> > 1.  Do our logic inside policy_check() and then (if necessary)...
>> > 2.  Load the default plugin (via dlopen and friends)?
>> >
>> > Is there anything wrong with that approach?
>>
>> I haven't tried to stack policy modules in that way but I can't
>> think of any reason it wouldn't work.
>>
>>  - todd
>>
>
>
> --
> Bryan
> <><
>


-- 
Bryan
<><


More information about the sudo-users mailing list