diff -Naur --- default.1.14/macros/program/ssh_agent_macros.te 2004-08-02 08:28:37.000000000 +0100 +++ current/macros/program/ssh_agent_macros.te 2004-08-14 23:34:48.000000000 +0100 @@ -86,7 +86,10 @@ ifdef(`xdm.te', ` allow $1_ssh_agent_t xdm_t:fd { use }; -allow $1_ssh_agent_t xdm_t:fifo_file { write }; +allow $1_ssh_agent_t xdm_t:fifo_file { read write }; + +# kdm: sigchld +allow $1_ssh_agent_t xdm_t:process { sigchld }; ') # @@ -103,5 +106,17 @@ allow $1_ssh_t $1_tmp_t:sock_file write; allow $1_ssh_t $1_t:unix_stream_socket connectto; allow $1_ssh_t sshd_t:unix_stream_socket connectto; + +dontaudit $1_ssh_agent_t selinux_config_t:file { getattr read }; + #EXE=/usr/bin/ssh-agent NAME=config : read + #EXE=/usr/bin/ssh-agent PATH=/etc/selinux/config : getattr + +allow $1_ssh_agent_t self:dir { search }; + #EXE=/usr/bin/ssh-agent NAME=2971 : search + +allow $1_ssh_agent_t self:file { getattr read }; + #EXE=/usr/bin/ssh-agent NAME=mounts : read + #EXE=/usr/bin/ssh-agent PATH=/proc/2971/mounts : getattr + ')dnl end if ssh_agent