* [PATCH] Add interface ssh_search_dir
@ 2019-06-18 12:08 Alexander Miroshnichenko
2019-06-20 13:23 ` Alexander Miroshnichenko
0 siblings, 1 reply; 2+ messages in thread
From: Alexander Miroshnichenko @ 2019-06-18 12:08 UTC (permalink / raw)
To: selinux-refpolicy; +Cc: Alexander Miroshnichenko
Create interface ssh_search_dir to allow ssh_server search for keys in non-standard location.
Signed-off-by: Alexander Miroshnichenko <alex@millerson.name>
---
policy/modules/services/ssh.if | 18 ++++++++++++++++++
1 file changed, 18 insertions(+)
diff --git a/policy/modules/services/ssh.if b/policy/modules/services/ssh.if
index b5bd2762ef96..7eb1cee2ef76 100644
--- a/policy/modules/services/ssh.if
+++ b/policy/modules/services/ssh.if
@@ -680,6 +680,24 @@ interface(`ssh_agent_exec',`
can_exec($1, ssh_agent_exec_t)
')
+########################################
+## <summary>
+## Search for keys in non-standard location
+## </summary>
+## <param name="domain">
+## <summary>
+## Domain allowed access.
+## </summary>
+## </param>
+#
+interface(`ssh_search_dir',`
+ gen_require(`
+ type sshd_t;
+ ')
+
+ search_dirs_pattern(sshd_t, $1, $2)
+')
+
########################################
## <summary>
## Read ssh home directory content
--
2.21.0
^ permalink raw reply related [flat|nested] 2+ messages in thread
* Re: [PATCH] Add interface ssh_search_dir
2019-06-18 12:08 [PATCH] Add interface ssh_search_dir Alexander Miroshnichenko
@ 2019-06-20 13:23 ` Alexander Miroshnichenko
0 siblings, 0 replies; 2+ messages in thread
From: Alexander Miroshnichenko @ 2019-06-20 13:23 UTC (permalink / raw)
To: selinux-refpolicy
Do not merge this patch, please. I will update it soon.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2019-06-20 13:52 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-06-18 12:08 [PATCH] Add interface ssh_search_dir Alexander Miroshnichenko
2019-06-20 13:23 ` Alexander Miroshnichenko
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).