diff options
author | Manoj Srivastava <srivasta@debian.org> | 2014-02-09 16:09:49 +0000 |
---|---|---|
committer | Colin Watson <cjwatson@debian.org> | 2016-12-23 11:25:02 +0000 |
commit | 5e4ebd6472d995738a2c67d618c4bd1ee2c00968 (patch) | |
tree | 26dd90d2a2260e26b9d0b712925eaed176879883 /platform.c | |
parent | 6a15c9b672c5833f21ed7e0cea3a25dd8de966c4 (diff) |
Handle SELinux authorisation roles
Rejected upstream due to discomfort with magic usernames; a better approach
will need an SSH protocol change. In the meantime, this came from Debian's
SELinux maintainer, so we'll keep it until we have something better.
Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1641
Bug-Debian: http://bugs.debian.org/394795
Last-Update: 2015-08-19
Patch-Name: selinux-role.patch
Diffstat (limited to 'platform.c')
-rw-r--r-- | platform.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/platform.c b/platform.c index 973a63e40..cd7bf5665 100644 --- a/platform.c +++ b/platform.c | |||
@@ -143,7 +143,7 @@ platform_setusercontext(struct passwd *pw) | |||
143 | * called if sshd is running as root. | 143 | * called if sshd is running as root. |
144 | */ | 144 | */ |
145 | void | 145 | void |
146 | platform_setusercontext_post_groups(struct passwd *pw) | 146 | platform_setusercontext_post_groups(struct passwd *pw, const char *role) |
147 | { | 147 | { |
148 | #if !defined(HAVE_LOGIN_CAP) && defined(USE_PAM) | 148 | #if !defined(HAVE_LOGIN_CAP) && defined(USE_PAM) |
149 | /* | 149 | /* |
@@ -184,7 +184,7 @@ platform_setusercontext_post_groups(struct passwd *pw) | |||
184 | } | 184 | } |
185 | #endif /* HAVE_SETPCRED */ | 185 | #endif /* HAVE_SETPCRED */ |
186 | #ifdef WITH_SELINUX | 186 | #ifdef WITH_SELINUX |
187 | ssh_selinux_setup_exec_context(pw->pw_name); | 187 | ssh_selinux_setup_exec_context(pw->pw_name, role); |
188 | #endif | 188 | #endif |
189 | } | 189 | } |
190 | 190 | ||