diff --git a/refpolicy/policy/modules/services/ssh.te b/refpolicy/policy/modules/services/ssh.te index a57e98d91..69e76520d 100644 --- a/refpolicy/policy/modules/services/ssh.te +++ b/refpolicy/policy/modules/services/ssh.te @@ -23,18 +23,18 @@ role system_r types ssh_keygen_t; ssh_server_template(sshd) -optional_policy(`inetd.te',` # cjp: commenting this out until typeattribute works in a conditional +#optional_policy(`inetd.te',` # tunable_policy(`run_ssh_inetd',` # inetd_tcp_service_domain(sshd_t,sshd_exec_t) # ',` - init_daemon_domain(sshd_t,sshd_exec_t) +# init_daemon_domain(sshd_t,sshd_exec_t) # ') -',` +#',` # These rules should match the else block # of the run_ssh_inetd tunable directly above init_daemon_domain(sshd_t,sshd_exec_t) -') +#') type sshd_exec_t; files_type(sshd_exec_t)