nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #241 from bauen1/fix-ssh-agent-debian

Browse Source
This commit is contained in:
Chris PeBenito 2020-04-24 10:03:18 -04:00
commit 292366f88d
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
policy/modules/services/ssh.fc
View File

@ -22,3 +22,7 @@ HOME_DIR/\.ssh(/.*)? gen_context(system_u:object_r:ssh_home_t,s0)
/run/sshd(/.*)? gen_context(system_u:object_r:sshd_runtime_t,s0)
/run/sshd\.init\.pid -- gen_context(system_u:object_r:sshd_runtime_t,s0)
/run/sshd\.pid -- gen_context(system_u:object_r:sshd_runtime_t,s0)
ifdef(`distro_debian',`
/run/user/%{USERID}/openssh_agent -s gen_context(system_u:object_r:ssh_agent_tmp_t,s0)
')

4
policy/modules/services/ssh.if
View File

@ -408,6 +408,10 @@ template(`ssh_role_template',`
allow $3 $1_ssh_agent_t:fifo_file rw_inherited_fifo_file_perms;
allow $3 $1_ssh_agent_t:process sigchld;
ifdef(`distro_debian', `
userdom_user_runtime_filetrans($1_ssh_agent_t, ssh_agent_tmp_t, sock_file)
')
tunable_policy(`use_nfs_home_dirs',`
fs_manage_nfs_files($1_ssh_agent_t)