Attachment 267761 Details for Bug 397131 – source for policy module

source for policy module

pam_ssh.te (text/plain), 1.15 KB, created by Martin Ebourne on 2007-11-23 18:00:30 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Martin Ebourne

Created: 2007-11-23 18:00:30 UTC

Size: 1.15 KB

patch

obsolete

>policy_module(pam_ssh,VERSION)
>
>require {
>	type local_login_t;
>	type local_login_tmp_t;
>	type ssh_agent_exec_t;
>	type sshd_t;
>	type xdm_t;
>        type user_home_ssh_t;
>        type var_run_t;
>        class dir { write add_name };
>        class file { read getattr execute execute_no_trans };
>        class sock_file create;
>}
>
>allow local_login_t ssh_agent_exec_t:file { read execute execute_no_trans };
>allow local_login_t user_home_ssh_t:file { read getattr };
>allow local_login_t var_run_t:dir { write add_name };
>allow local_login_t var_run_t:file { create read getattr };
>allow local_login_t local_login_tmp_t:sock_file create;
>
>allow sshd_t ssh_agent_exec_t:file { read execute execute_no_trans };
>allow sshd_t user_home_ssh_t:file { read getattr };
>allow sshd_t var_run_t:dir { write add_name };
>allow sshd_t var_run_t:file { create read getattr };
>allow sshd_t local_login_tmp_t:sock_file create;
>
>allow xdm_t ssh_agent_exec_t:file { read execute execute_no_trans };
>allow xdm_t user_home_ssh_t:file { read getattr };
>allow xdm_t var_run_t:dir { write add_name };
>allow xdm_t var_run_t:file { create read getattr };
>allow xdm_t local_login_tmp_t:sock_file create;

Actions: View

Attachments on bug 397131: 267751 | 267761