From: bigon@debian.org (Laurent Bigonville) Date: Wed, 12 Sep 2012 21:56:40 +0200 Subject: [refpolicy] [PATCH 2/2] Add Debian location for ssh-keysign In-Reply-To: <1347479800-9847-1-git-send-email-bigon@debian.org> References: <1347479800-9847-1-git-send-email-bigon@debian.org> Message-ID: <1347479800-9847-2-git-send-email-bigon@debian.org> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com From: Laurent Bigonville --- policy/modules/services/ssh.fc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/policy/modules/services/ssh.fc b/policy/modules/services/ssh.fc index 64b3e11..ce0f22f 100644 --- a/policy/modules/services/ssh.fc +++ b/policy/modules/services/ssh.fc @@ -12,6 +12,10 @@ HOME_DIR/\.ssh(/.*)? gen_context(system_u:object_r:ssh_home_t,s0) /usr/libexec/openssh/ssh-keysign -- gen_context(system_u:object_r:ssh_keysign_exec_t,s0) +ifdef(`distro_debian',` +/usr/lib/openssh/ssh-keysign -- gen_context(system_u:object_r:ssh_keysign_exec_t,s0) +') + /usr/sbin/sshd -- gen_context(system_u:object_r:sshd_exec_t,s0) /var/run/sshd\.init\.pid -- gen_context(system_u:object_r:sshd_var_run_t,s0) -- 1.7.10.4