Set SELinux context on private host keys as well as public host keys

(closes: #687436).

2 files changed, 3 insertions, 1 deletions

diff --git a/debian/changelog b/debian/changelog
index 099cd254b..c9b5dadc7 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -3,6 +3,8 @@ openssh (1:6.2p2-4) UNRELEASED; urgency=low
   * Fix non-portable shell in ssh-copy-id (closes: #711162).
   * Rebuild against debhelper 9.20130604 with fixed dependencies for
     invoke-rc.d and Upstart jobs (closes: #711364).
+  * Set SELinux context on private host keys as well as public host keys
+    (closes: #687436).
 
  -- Colin Watson <cjwatson@debian.org>  Fri, 31 May 2013 16:20:49 +0100
 
diff --git a/debian/openssh-server.postinst b/debian/openssh-server.postinst
index 087a7125e..bec99f746 100644
--- a/debian/openssh-server.postinst
+++ b/debian/openssh-server.postinst
@@ -102,7 +102,7 @@ create_key() {
                 ssh-keygen -q -f "$file" -N '' "$@"
                 echo
                 if which restorecon >/dev/null 2>&1; then
-                        restorecon "$file.pub"
+                        restorecon "$file" "$file.pub"
                 fi
         fi
 }