application: applications can be executed from ssh without pty

For example ansible uses `ssh localhost sudo id` to become root.
This doesn't appear to be necessary in redhat due to https://src.fedoraproject.org/rpms/openssh/blob/master/f/openssh-6.6p1-privsep-selinux.patch

Signed-off-by: bauen1 <j2468h@gmail.com>
This commit is contained in:
bauen1 2020-05-11 18:28:05 +02:00
parent ded295d16f
commit dd8ed0ba14
No known key found for this signature in database
GPG Key ID: FF0AAF5E0812BA9C

View File

@ -13,6 +13,10 @@ optional_policy(`
optional_policy(`
ssh_sigchld(application_domain_type)
ssh_rw_stream_sockets(application_domain_type)
ifndef(`distro_redhat', `
ssh_rw_pipes(application_domain_type)
')
')
optional_policy(`