Bug 789502

Description of problem:
The latest openssh-server in Rawhide does not permit me to log in. (Logins on the console work fine.)

Version-Release number of selected component (if applicable):
openssh-server-5.9p1-18.fc17.i686
selinux-policy-3.10.0-85.fc17.noarch

How reproducible:
Every time

Steps to Reproduce:
1. Update the SSH server to the latest Rawhide, reboot
2. Try to login via SSH (I'm using password auth)
3. Login fails

When I type the password correctly, SSH accepts it, but my client immediately reports "Write failed: Broken pipe" for a normal user account. When I try with  root, my client doesn't print any messages (but still immediately disconnects.)


Actual results:
Here's the output in /var/log/secure when this is broken:

Feb 10 14:35:45 rawhide sshd[766]: Server listening on 0.0.0.0 port 22.
Feb 10 14:35:45 rawhide sshd[766]: Server listening on :: port 22.
Feb 10 14:36:39 rawhide sshd[789]: Accepted password for root from 192.168.2.224
 port 39553 ssh2
Feb 10 14:36:39 rawhide sshd[789]: pam_selinux(sshd:session): Security context u
nconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 is not allowed for unconfined_
u:system_r:abrt_helper_t:s0-s0:c0.c1023
Feb 10 14:36:39 rawhide sshd[789]: pam_selinux(sshd:session): Unable to get vali
d context for root
Feb 10 14:36:39 rawhide sshd[789]: pam_unix(sshd:session): session opened for us
er root by (uid=0)
Feb 10 14:36:39 rawhide sshd[789]: error: ssh_selinux_setup_pty: security_comput
e_relabel: Invalid argument
Feb 10 14:36:39 rawhide sshd[793]: ssh_selinux_copy_context: setcon failed with 
Invalid argument
Feb 10 14:36:39 rawhide sshd[793]: fatal: xfree: NULL pointer given as argument
Feb 10 14:36:39 rawhide sshd[789]: Received disconnect from 192.168.2.224: 11: d
isconnected by user
Feb 10 14:36:39 rawhide sshd[789]: pam_unix(sshd:session): session closed for us
er root

Expected results:
After I downgraded openssh to 5.9p1-16.fc17.i686, I'm able to log in successfully. Here's /var/log/secure after the downgrade:

Feb 10 14:48:01 rawhide sshd[922]: Server listening on 0.0.0.0 port 22.
Feb 10 14:48:01 rawhide sshd[922]: Server listening on :: port 22.
Feb 10 14:48:07 rawhide sshd[923]: Accepted password for root from 192.168.2.224 port 39607 ssh2
Feb 10 14:48:07 rawhide sshd[923]: pam_selinux(sshd:session): Security context unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 is not allowed for unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023
Feb 10 14:48:07 rawhide sshd[923]: pam_selinux(sshd:session): Unable to get valid context for root
Feb 10 14:48:07 rawhide sshd[923]: pam_unix(sshd:session): session opened for user root by (uid=0)
Feb 10 14:48:07 rawhide sshd[923]: error: ssh_selinux_setup_pty: security_compute_relabel: Invalid argument


Since I installed this box months ago, SELinux has always been in permissive mode. I also tried touch /.autorelabel and rebooted, to no effect.