sudorule: add SELinux transition examples to plugin doc

It is not obvious how to add SELinux type and role transitions to a
Sudo rule.  Update the 'sudorule' plugin documentation with examples
of how to do this.

Fixes: https://fedorahosted.org/freeipa/ticket/3461
Reviewed-By: Tomas Krizek <tkrizek@redhat.com>
This commit is contained in:
Fraser Tweedale 2016-09-23 16:43:19 +10:00 committed by Martin Basti
parent 9b68d2a1f8
commit ff490b6c40

View File

@ -88,6 +88,10 @@ EXAMPLES:
""") + _(""" """) + _("""
Set a default Sudo option: Set a default Sudo option:
ipa sudorule-add-option defaults --sudooption '!authenticate' ipa sudorule-add-option defaults --sudooption '!authenticate'
""") + _("""
Set SELinux type and role transitions on a rule:
ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t
ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r
""") """)
register = Registry() register = Registry()