Skip to content

Commit 6b9f0bb

Browse files
gosipyanzpytela
authored andcommitted
Allow sshd_auth_t getopt/setopt on tcp_socket (bsc#1252992)
1 parent ede2d5e commit 6b9f0bb

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

policy/modules/services/ssh.te

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -166,7 +166,7 @@ domtrans_pattern(sshd_session_t, sshd_auth_exec_t, sshd_auth_t)
166166
allow sshd_auth_t self:process { setcurrent setrlimit };
167167
allow sshd_auth_t self:unix_dgram_socket { create ioctl };
168168

169-
allow sshd_auth_t sshd_t:tcp_socket { getattr read write };
169+
allow sshd_auth_t sshd_t:tcp_socket { getattr read write getopt setopt };
170170
allow sshd_auth_t sshd_session_t:unix_stream_socket { read write };
171171

172172
kernel_read_proc_files(sshd_auth_t)

0 commit comments

Comments
 (0)