rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Fix typo bug in ssh policy

Browse Source
This commit is contained in:
Lukas Vrabec 2016-07-27 10:52:29 +02:00
parent 95987e7beb
commit 4f692c42ee
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
policy-rawhide-base.patch
View File

@ -28892,7 +28892,7 @@ index fe0c682..60003bc 100644
+ ps_process_pattern($1, sshd_t) + ps_process_pattern($1, sshd_t)
+') +')
diff --git a/policy/modules/services/ssh.te b/policy/modules/services/ssh.te diff --git a/policy/modules/services/ssh.te b/policy/modules/services/ssh.te
index cc877c7..80996f3 100644 index cc877c7..4d56aea 100644
--- a/policy/modules/services/ssh.te --- a/policy/modules/services/ssh.te
+++ b/policy/modules/services/ssh.te +++ b/policy/modules/services/ssh.te
@@ -6,43 +6,69 @@ policy_module(ssh, 2.4.2) @@ -6,43 +6,69 @@ policy_module(ssh, 2.4.2)
@ -29004,7 +29004,7 @@ index cc877c7..80996f3 100644
# #
-allow ssh_t self:capability { setuid setgid dac_override dac_read_search }; -allow ssh_t self:capability { setuid setgid dac_override dac_read_search };
+allow ssh_t self:capability { setcap setuid setgid dac_override dac_read_search }; +allow ssh_t self:capability { setpcap setuid setgid dac_override dac_read_search };
allow ssh_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap }; allow ssh_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap };
allow ssh_t self:fd use; allow ssh_t self:fd use;
allow ssh_t self:fifo_file rw_fifo_file_perms; allow ssh_t self:fifo_file rw_fifo_file_perms;