Allow ssh-agent to send signals to itself

This is neccessary for "ssh-agent -k".
This commit is contained in:
Luis Ressel 2015-07-19 19:48:28 +02:00 committed by Chris PeBenito
parent 95248e4919
commit d8071a8e1b
1 changed files with 1 additions and 1 deletions

View File

@ -346,7 +346,7 @@ template(`ssh_role_template',`
# SSH agent local policy
#
allow $1_ssh_agent_t self:process setrlimit;
allow $1_ssh_agent_t self:process { setrlimit signal };
allow $1_ssh_agent_t self:capability setgid;
allow $1_ssh_agent_t { $1_ssh_agent_t $3 }:process signull;