From 3a9a9a5de73cadfd9629967c3e9b105b3cfc48e0 Mon Sep 17 00:00:00 2001 From: Patrik Koncity Date: Wed, 9 Sep 2020 12:09:09 +0200 Reference: https://github.com/fedora-selinux/selinux-policy/commit/3a9a9a5de73cadfd9629967c3e9b105b3cfc48e0 Conflict: NA Subject: [PATCH] Allow dyntransition from sshd_t to unconfined_t Removing attribute in previous commit affected connecting via ssh to unconfined user. Missed dyntransition from sshd domain to unconfined domain. Added ssh_dyntransition_to() interface. --- policy/modules/roles/unconfineduser.te | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/roles/unconfineduser.te b/policy/modules/roles/unconfineduser.te index ca8947b..4ab04b3 100644 --- a/policy/modules/roles/unconfineduser.te +++ b/policy/modules/roles/unconfineduser.te @@ -91,6 +91,8 @@ logging_send_syslog_msg(unconfined_t) systemd_config_all_services(unconfined_t) +ssh_dyntransition_to(unconfined_t) + unconfined_domain_noaudit(unconfined_t) domain_named_filetrans(unconfined_t) domain_transition_all(unconfined_t) -- 1.8.3.1