[selinux-policy: 1777/3172] trunk: fix targeted sshd. When the domain was unaliased from unconfined_t, a transition to unconfin

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 21:38:35 UTC 2010


commit 708aab13932bb8830a2d37850cc0a5c72a5d4df4
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Fri Jul 20 18:25:26 2007 +0000

    trunk: fix targeted sshd.  When the domain was unaliased from unconfined_t, a transition to unconfined_t was not added.

 policy/modules/services/ssh.te |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)
---
diff --git a/policy/modules/services/ssh.te b/policy/modules/services/ssh.te
index b8ca2f5..5e0df2e 100644
--- a/policy/modules/services/ssh.te
+++ b/policy/modules/services/ssh.te
@@ -1,5 +1,5 @@
 
-policy_module(ssh,1.7.1)
+policy_module(ssh,1.7.2)
 
 ########################################
 #
@@ -82,6 +82,7 @@ corenet_sendrecv_xserver_server_packets(sshd_t)
 
 ifdef(`targeted_policy',`
 	unconfined_domain(sshd_t)
+	unconfined_shell_domtrans(sshd_t)
 ')
 
 tunable_policy(`ssh_sysadm_login',`


More information about the scm-commits mailing list