From 93e4685552ec0a0b045114080cc430fcce11f171 Mon Sep 17 00:00:00 2001 From: Sven Vermeulen Date: Wed, 28 Dec 2011 20:36:03 +0100 Subject: [PATCH] sshd can call mkhomedir when a new user logs on These services are offered through the oddjob module. Signed-off-by: Sven Vermeulen --- policy/modules/services/ssh.te | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/policy/modules/services/ssh.te b/policy/modules/services/ssh.te index 3d7796103..c6a4baa7d 100644 --- a/policy/modules/services/ssh.te +++ b/policy/modules/services/ssh.te @@ -268,6 +268,10 @@ optional_policy(` kerberos_keytab_template(sshd, sshd_t) ') +optional_policy(` + oddjob_domtrans_mkhomedir(sshd_t) +') + optional_policy(` rpm_use_script_fds(sshd_t) ')