31 lines
1.1 KiB
Diff
31 lines
1.1 KiB
Diff
From 3a9a9a5de73cadfd9629967c3e9b105b3cfc48e0 Mon Sep 17 00:00:00 2001
|
|
From: Patrik Koncity <pkoncity@redhat.com>
|
|
Date: Wed, 9 Sep 2020 12:09:09 +0200
|
|
Reference: https://github.com/fedora-selinux/selinux-policy/commit/3a9a9a5de73cadfd9629967c3e9b105b3cfc48e0
|
|
Conflict: NA
|
|
Subject: [PATCH] Allow dyntransition from sshd_t to unconfined_t
|
|
|
|
Removing attribute in previous commit affected connecting via ssh to unconfined user.
|
|
Missed dyntransition from sshd domain to unconfined domain.
|
|
Added ssh_dyntransition_to() interface.
|
|
---
|
|
policy/modules/roles/unconfineduser.te | 2 ++
|
|
1 file changed, 2 insertions(+)
|
|
|
|
diff --git a/policy/modules/roles/unconfineduser.te b/policy/modules/roles/unconfineduser.te
|
|
index ca8947b..4ab04b3 100644
|
|
--- a/policy/modules/roles/unconfineduser.te
|
|
+++ b/policy/modules/roles/unconfineduser.te
|
|
@@ -91,6 +91,8 @@ logging_send_syslog_msg(unconfined_t)
|
|
|
|
systemd_config_all_services(unconfined_t)
|
|
|
|
+ssh_dyntransition_to(unconfined_t)
|
|
+
|
|
unconfined_domain_noaudit(unconfined_t)
|
|
domain_named_filetrans(unconfined_t)
|
|
domain_transition_all(unconfined_t)
|
|
--
|
|
1.8.3.1
|
|
|