Re: Please review openssh patch for selinux

[Daniel J Walsh <dwalsh@redhat.com>]

Stephen Smalley wrote:

>On Thu, 2004-09-02 at 16:11, Daniel J Walsh wrote:
>  
>
>>New SSH patch.
>>
>>Provides the capability of doing
>>
>>ssh hostname -l root/sysadm_r
>>
>>suggested by Collin. 
>>
>>I used the / instead of : to preserve the BSD syntax.
>>    
>>
>
>As per the earlier discussion on the list, I think we want a new
>libselinux function similar to get_default_context() that also takes the
>optional role, and rather than simply substituting the role (if
>specified) and its default type, it would check the array returned by
>get_ordered_context_list for the first entry that matches the role and
>return the entry or fail if no such entry exists.  That would ensure
>that we immediately abort if the role is not reachable by sshd, and also
>allow an admin to prevent use of this feature for a given role simply by
>not listing it in the sshd entry in defualt_contexts.
>
>  
>
Ok, can you create the function?

Dan

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.