* Fix broken switch fallthrough when SELinux is running in permissive mode

  (closes: #430838).

2 files changed, 4 insertions, 0 deletions

diff --git a/debian/changelog b/debian/changelog
index e8c9e4ba9..421434c38 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,8 @@
 openssh (1:4.6p1-3) UNRELEASED; urgency=low
 
   * Only build PIE executables on Linux and NetBSD (closes: #430455).
+  * Fix broken switch fallthrough when SELinux is running in permissive mode
+    (closes: #430838).
 
  -- Colin Watson <cjwatson@debian.org>  Tue, 26 Jun 2007 09:56:40 +0100
 
diff --git a/openbsd-compat/port-linux.c b/openbsd-compat/port-linux.c
index 030c733df..7f15d06fb 100644
--- a/openbsd-compat/port-linux.c
+++ b/openbsd-compat/port-linux.c
@@ -96,6 +96,7 @@ ssh_selinux_getctxbyname(char *pwname)
                 case 0:
                         error("%s: Failed to get default SELinux security "
                             "context for %s", __func__, pwname);
+                        break;
                 default:
                         fatal("%s: Failed to get default SELinux security "
                             "context for %s (in enforcing mode)",
@@ -132,6 +133,7 @@ ssh_selinux_setup_exec_context(char *pwname)
                 case 0:
                         error("%s: Failed to set SELinux execution "
                             "context for %s", __func__, pwname);
+                        break;
                 default:
                         fatal("%s: Failed to set SELinux execution context "
                             "for %s (in enforcing mode)", __func__, pwname);