Allow ssh-agent to send signals to itself
This is neccessary for "ssh-agent -k".
This commit is contained in:
parent
95248e4919
commit
d8071a8e1b
|
@ -346,7 +346,7 @@ template(`ssh_role_template',`
|
|||
# SSH agent local policy
|
||||
#
|
||||
|
||||
allow $1_ssh_agent_t self:process setrlimit;
|
||||
allow $1_ssh_agent_t self:process { setrlimit signal };
|
||||
allow $1_ssh_agent_t self:capability setgid;
|
||||
|
||||
allow $1_ssh_agent_t { $1_ssh_agent_t $3 }:process signull;
|
||||
|
|
Loading…
Reference in New Issue