feat(profile): add profile for sshd session.

It is only a first draft as recent update in sshd, split sshd in multiple binaries,
it will allow us to also split the confinement in multiple profile.
This commit is contained in:
Alexandre Pujol 2025-06-21 19:52:22 +02:00
parent 5eb08f8de5
commit 03d7ef5589
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
2 changed files with 86 additions and 1 deletions

View file

@ -69,7 +69,7 @@ profile sshd @{exec_path} flags=(attach_disconnected) {
@{bin}/passwd Px,
@{lib}/{openssh,ssh}/sftp-server Px,
@{lib}/{openssh,ssh}/sshd-auth Px,
@{lib}/{openssh,ssh}/sshd-session ix,
@{lib}/{openssh,ssh}/sshd-session Px,
@{etc_ro}/environment r,
@{etc_ro}/security/limits.d/{,*.conf} r,