felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ssh-keygen: allow execution of ssh-sk-helper

Browse source 
The ssh-sk-helper  profile was added last year but never hooked into the ssh-keygen profile.

This is needed for generating SSH keys that live on a yubikey.
This commit is contained in:
doublez13 2025-09-12 10:26:41 -06:00 • committed by GitHub
parent 865bac4cc6
commit 2a36fb3121
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/ssh/ssh-keygen
View file

@ -15,6 +15,8 @@ profile ssh-keygen @{exec_path} {
@{exec_path} mr,
@{lib}/{,ssh/}ssh-sk-helper rPx -> ssh-sk-helper,
/etc/ssh/moduli rw,
/etc/ssh/ssh_host_*_key* rw,