Changeset 112

Timestamp:

Jan 21, 2007, 6:08:12 PM (18 years ago)

Author:

presbrey

Message:

forwarded kerberos tickets

File:

• selinux/build/scripts.te (modified) (2 diffs)

selinux/build/scripts.te

@@ -69 +69 @@
 
 require {
-        type sshd_t;
+        type sshd_t, sshd_tmp_t;
 };
 
@@ -75 +75 @@
 ### sshd GSSAPI authentication
 kerberos_read_keytab(sshd_t)
+# forwarded kerberos tickets via ssh -K
+allow user_t sshd_tmp_t:file r_file_perms;
+
 dontaudit user_t kernel_t:key all_key_perms;