RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/services/ssh.fc

24 lines
1.2 KiB
Plaintext
Raw Normal View History

SSH patch from Dan Walsh.
2010-01-15 20:28:27 +00:00
HOME_DIR/\.ssh(/.*)? gen_context(system_u:object_r:ssh_home_t,s0)
trunk: merge strict and targeted policies. merge shlib_t into lib_t.
2007-10-02 16:04:50 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/etc/ssh/primes -- gen_context(system_u:object_r:sshd_key_t,s0)
Properly label all the ssh host keys Be sure that we are labeling properly all ssh host keys even if new algorithms are added in the future.
2012-12-05 20:39:22 +00:00
/etc/ssh/ssh_host.*_key -- gen_context(system_u:object_r:sshd_key_t,s0)
add missing ssh file contexts
2005-07-06 15:59:54 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/bin/ssh -- gen_context(system_u:object_r:ssh_exec_t,s0)
trunk: merge strict and targeted policies. merge shlib_t into lib_t.
2007-10-02 16:04:50 +00:00
/usr/bin/ssh-agent -- gen_context(system_u:object_r:ssh_agent_exec_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/bin/ssh-keygen -- gen_context(system_u:object_r:ssh_keygen_exec_t,s0)
add missing ssh file contexts
2005-07-06 15:59:54 +00:00
Label OpenSSH files correctly on Arch Linux On Arch Linux, OpenSSH installs these binary files in /usr/lib/ssh: * sftp-server (labeled with ssh_keysign_exec_t type in refpolicy) * ssh-askpass (symlink to x11-ssh-askpass) * ssh-keysign * ssh-pkcs11-helper * x11-ssh-askpass (from x11-ssh-askpass package) Label all these files but sftp-server as bin_t.
2015-12-20 15:28:49 +00:00
/usr/lib/openssh/ssh-keysign -- gen_context(system_u:object_r:ssh_keysign_exec_t,s0)
/usr/lib/ssh/ssh-keysign -- gen_context(system_u:object_r:ssh_keysign_exec_t,s0)
Add Debian location for ssh-keysign
2012-11-04 01:23:10 +00:00
Label OpenSSH systemd unit files On Arch Linux, OpenSSH unit files are: /usr/lib/systemd/system/sshdgenkeys.service /usr/lib/systemd/system/sshd.service /usr/lib/systemd/system/sshd@.service /usr/lib/systemd/system/sshd.socket On Debian jessie, the unit files are: /lib/systemd/system/ssh.service /lib/systemd/system/ssh@.service /lib/systemd/system/ssh.socket On Fedora 22, the unit files are: /usr/lib/systemd/system/sshd-keygen.service /usr/lib/systemd/system/sshd.service /usr/lib/systemd/system/sshd@.service /usr/lib/systemd/system/sshd.socket Use a pattern which matches every sshd unit and introduce an other type for ssh-keygen units.
2015-12-20 15:28:50 +00:00
/usr/lib/systemd/system/ssh.* -- gen_context(system_u:object_r:sshd_unit_t,s0)
/usr/lib/systemd/system/sshdgenkeys.* -- gen_context(system_u:object_r:sshd_keygen_unit_t,s0)
/usr/lib/systemd/system/sshd-keygen.* -- gen_context(system_u:object_r:sshd_keygen_unit_t,s0)
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/libexec/openssh/ssh-keysign -- gen_context(system_u:object_r:ssh_keysign_exec_t,s0)
more merging from nsa cvs
2005-09-16 13:36:26 +00:00
rename context_template() to gen_context()
2005-10-06 19:33:06 +00:00
/usr/sbin/sshd -- gen_context(system_u:object_r:sshd_exec_t,s0)
add missing ssh file contexts
2005-07-06 15:59:54 +00:00
transition file contexts to /run Remove file context aliases and update file context paths to use the /run filesystem path. Add backward compatibility file context alias for /var/run using applications like https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783321 Lock files are still seated at /var/lock
2016-12-16 20:07:56 +00:00
/run/sshd(/.*)? gen_context(system_u:object_r:sshd_var_run_t,s0)
/run/sshd\.init\.pid -- gen_context(system_u:object_r:sshd_var_run_t,s0)
/run/sshd\.pid -- gen_context(system_u:object_r:sshd_var_run_t,s0)