Allow sshd to transition to sysadm_t if ssh_sysadm_login is turned on

diff --git a/policy/modules/services/ssh.te b/policy/modules/services/ssh.te
index 8b29f299f8f2758ad18b214a9d89b2708948b567..386918b5be90136aceb80c7fee1659efe3217c41 100644 (file)
--- a/policy/modules/services/ssh.te
+++ b/policy/modules/services/ssh.te
@@ -286,6 +286,7 @@ tunable_policy(`ssh_sysadm_login',`
        # display the tty.
        # some versions of sshd on the new SE Linux require setattr
        userdom_signal_all_users(sshd_t)
+       userdom_spec_domtrans_all_users(sshd_t)
 ')
 
 optional_policy(`