RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Ssh key creation fix from Gentoo.

This commit is contained in:
Chris PeBenito 2010-02-17 20:32:08 -05:00
parent 2c05132062
commit d08a3df046
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
policy/modules/services/ssh.if
View File

@ -183,7 +183,7 @@ template(`ssh_server_template', `
allow $1_t self:capability { kill sys_chroot sys_resource chown dac_override fowner fsetid setgid setuid sys_tty_config }; allow $1_t self:capability { kill sys_chroot sys_resource chown dac_override fowner fsetid setgid setuid sys_tty_config };
allow $1_t self:fifo_file rw_fifo_file_perms; allow $1_t self:fifo_file rw_fifo_file_perms;
allow $1_t self:process { signal getsched setsched setrlimit setexec }; allow $1_t self:process { signal getsched setsched setrlimit setexec setkeycreate };
allow $1_t self:tcp_socket create_stream_socket_perms; allow $1_t self:tcp_socket create_stream_socket_perms;
allow $1_t self:udp_socket create_socket_perms; allow $1_t self:udp_socket create_socket_perms;
# ssh agent connections: # ssh agent connections:
@ -242,6 +242,7 @@ template(`ssh_server_template', `
miscfiles_read_localization($1_t) miscfiles_read_localization($1_t)
userdom_create_all_users_keys($1_t)
userdom_dontaudit_relabelfrom_user_ptys($1_t) userdom_dontaudit_relabelfrom_user_ptys($1_t)
userdom_search_user_home_dirs($1_t) userdom_search_user_home_dirs($1_t)

2
policy/modules/services/ssh.te
View File

@ -1,5 +1,5 @@
policy_module(ssh, 2.1.1) policy_module(ssh, 2.1.2)
######################################## ########################################
# #