diff options
author | Manoj Srivastava <srivasta@debian.org> | 2014-02-09 16:09:49 +0000 |
---|---|---|
committer | Colin Watson <cjwatson@debian.org> | 2019-10-09 23:06:25 +0100 |
commit | 3131e3bb3c56a6c6ee8cb9d68f542af04cd9e8ff (patch) | |
tree | fb2bdf39ed7ad6111f501712d2d9346a55528214 /sshpty.c | |
parent | 57c1dd662f9259f58a47801e2d4b0f84e973441d (diff) |
Handle SELinux authorisation roles
Rejected upstream due to discomfort with magic usernames; a better approach
will need an SSH protocol change. In the meantime, this came from Debian's
SELinux maintainer, so we'll keep it until we have something better.
Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1641
Bug-Debian: http://bugs.debian.org/394795
Last-Update: 2019-06-05
Patch-Name: selinux-role.patch
Diffstat (limited to 'sshpty.c')
-rw-r--r-- | sshpty.c | 4 |
1 files changed, 2 insertions, 2 deletions
@@ -162,7 +162,7 @@ pty_change_window_size(int ptyfd, u_int row, u_int col, | |||
162 | } | 162 | } |
163 | 163 | ||
164 | void | 164 | void |
165 | pty_setowner(struct passwd *pw, const char *tty) | 165 | pty_setowner(struct passwd *pw, const char *tty, const char *role) |
166 | { | 166 | { |
167 | struct group *grp; | 167 | struct group *grp; |
168 | gid_t gid; | 168 | gid_t gid; |
@@ -186,7 +186,7 @@ pty_setowner(struct passwd *pw, const char *tty) | |||
186 | strerror(errno)); | 186 | strerror(errno)); |
187 | 187 | ||
188 | #ifdef WITH_SELINUX | 188 | #ifdef WITH_SELINUX |
189 | ssh_selinux_setup_pty(pw->pw_name, tty); | 189 | ssh_selinux_setup_pty(pw->pw_name, tty, role); |
190 | #endif | 190 | #endif |
191 | 191 | ||
192 | if (st.st_uid != pw->pw_uid || st.st_gid != gid) { | 192 | if (st.st_uid != pw->pw_uid || st.st_gid != gid) { |