[selinux-policy: 637/3172] fix sshd to use initrc transition while typeattribute in conditionals is still broken

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 19:59:42 UTC 2010


commit 0fdf3ef75e2266d401da8e54a682fab8cdf0f9c5
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Fri Sep 9 20:49:59 2005 +0000

    fix sshd to use initrc transition while typeattribute in conditionals is still broken

 refpolicy/policy/modules/services/ssh.te |    8 ++++----
 1 files changed, 4 insertions(+), 4 deletions(-)
---
diff --git a/refpolicy/policy/modules/services/ssh.te b/refpolicy/policy/modules/services/ssh.te
index a57e98d..69e7652 100644
--- a/refpolicy/policy/modules/services/ssh.te
+++ b/refpolicy/policy/modules/services/ssh.te
@@ -23,18 +23,18 @@ role system_r types ssh_keygen_t;
 
 ssh_server_template(sshd)
 
-optional_policy(`inetd.te',`
 # cjp: commenting this out until typeattribute works in a conditional
+#optional_policy(`inetd.te',`
 #	tunable_policy(`run_ssh_inetd',`
 #		inetd_tcp_service_domain(sshd_t,sshd_exec_t)
 #	',`
-		init_daemon_domain(sshd_t,sshd_exec_t)
+#		init_daemon_domain(sshd_t,sshd_exec_t)
 #	')
-',`
+#',`
 	# These rules should match the else block
 	# of the run_ssh_inetd tunable directly above
 	init_daemon_domain(sshd_t,sshd_exec_t)
-')
+#')
 
 type sshd_exec_t;
 files_type(sshd_exec_t)


More information about the scm-commits mailing list