Allow ssh-agent to send signals to itself
PATCH 1/1 Allow ssh-agent to send signals to itself
This is neccessary for "ssh-agent -k".
--- policy/modules/services/ssh.if | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
policy/modules/services/ssh.if +1 -1
@@ -346,7 +346,7 @@ template(`ssh_role_template',` # SSH agent local policy # - allow $1_ssh_agent_t self:process setrlimit; + allow $1_ssh_agent_t self:process { setrlimit signal }; allow $1_ssh_agent_t self:capability setgid; allow $1_ssh_agent_t { $1_ssh_agent_t $3 }:process signull;
Signature · 1 line
2.4.5
PATCH 1/1 Allow ssh-agent to send signals to itself
Quoted 10 lines · Luis Ressel
This is neccessary for "ssh-agent -k".
--- policy/modules/services/ssh.if | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)policy/modules/services/ssh.if +0
-0
policy/modules/services/ssh.if template(`ssh_role_template',` · line 352
Quoted 8 lines
policy/modules/services/ssh.if +1
-1@@ -346,7 +346,7 @@ template(`ssh_role_template',` # SSH agent local policy # - allow $1_ssh_agent_t self:process setrlimit; + allow $1_ssh_agent_t self:process { setrlimit signal }; allow $1_ssh_agent_t self:capability setgid; allow $1_ssh_agent_t { $1_ssh_agent_t $3 }:process signull;
Merged.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com