diff options
author | Manoj Srivastava <srivasta@debian.org> | 2014-02-09 16:09:49 +0000 |
---|---|---|
committer | Colin Watson <cjwatson@debian.org> | 2015-11-29 17:36:18 +0000 |
commit | d55bc528ac450324522f02d90a2bdc4832d1eef8 (patch) | |
tree | 206c0995c85770f5a2ee00ce640cc4555ad6deb0 /sshd.c | |
parent | 2cd06c4a70dfb22fd1d54779173b5e086c52e08f (diff) |
Handle SELinux authorisation roles
Rejected upstream due to discomfort with magic usernames; a better approach
will need an SSH protocol change. In the meantime, this came from Debian's
SELinux maintainer, so we'll keep it until we have something better.
Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1641
Bug-Debian: http://bugs.debian.org/394795
Last-Update: 2015-08-19
Patch-Name: selinux-role.patch
Diffstat (limited to 'sshd.c')
-rw-r--r-- | sshd.c | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -782,7 +782,7 @@ privsep_postauth(Authctxt *authctxt) | |||
782 | explicit_bzero(rnd, sizeof(rnd)); | 782 | explicit_bzero(rnd, sizeof(rnd)); |
783 | 783 | ||
784 | /* Drop privileges */ | 784 | /* Drop privileges */ |
785 | do_setusercontext(authctxt->pw); | 785 | do_setusercontext(authctxt->pw, authctxt->role); |
786 | 786 | ||
787 | skip: | 787 | skip: |
788 | /* It is safe now to apply the key state */ | 788 | /* It is safe now to apply the key state */ |