From 708aab13932bb8830a2d37850cc0a5c72a5d4df4 Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Fri, 20 Jul 2007 18:25:26 +0000
Subject: [PATCH] trunk: fix targeted sshd.  When the domain was unaliased from
 unconfined_t, a transition to unconfined_t was not added.

---
 policy/modules/services/ssh.te | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/policy/modules/services/ssh.te b/policy/modules/services/ssh.te
index b8ca2f577..5e0df2e92 100644
--- a/policy/modules/services/ssh.te
+++ b/policy/modules/services/ssh.te
@@ -1,5 +1,5 @@
 
-policy_module(ssh,1.7.1)
+policy_module(ssh,1.7.2)
 
 ########################################
 #
@@ -82,6 +82,7 @@ corenet_sendrecv_xserver_server_packets(sshd_t)
 
 ifdef(`targeted_policy',`
 	unconfined_domain(sshd_t)
+	unconfined_shell_domtrans(sshd_t)
 ')
 
 tunable_policy(`ssh_sysadm_login',`