Handle SELinux authorisation roles

Rejected upstream due to discomfort with magic usernames; a better approach
will need an SSH protocol change.  In the meantime, this came from Debian's
SELinux maintainer, so we'll keep it until we have something better.

Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1641
Bug-Debian: http://bugs.debian.org/394795
Last-Update: 2013-09-14

Patch-Name: selinux-role.patch

1 files changed, 1 insertions, 0 deletions

diff --git a/auth.h b/auth.h
index 80f089869..5b6824f71 100644
--- a/auth.h
+++ b/auth.h
@@ -59,6 +59,7 @@ struct Authctxt {
         char            *service;
         struct passwd   *pw;            /* set if 'valid' */
         char            *style;
+        char            *role;
         void            *kbdintctxt;
         char            *info;          /* Extra info for next auth_log */
         void            *jpake_ctx;