From c67773947ec9951c18fd511093be9bea78aa79de Mon Sep 17 00:00:00 2001
From: doublez13 <zakraise@eng.utah.edu>
Date: Fri, 12 Sep 2025 08:09:04 -0600
Subject: [PATCH] ssh: allow ssh to authenticate to remote hosts using kerberos
 tickets

---
 apparmor.d/groups/ssh/ssh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/apparmor.d/groups/ssh/ssh b/apparmor.d/groups/ssh/ssh
index bf71a8463..c2926a3a4 100644
--- a/apparmor.d/groups/ssh/ssh
+++ b/apparmor.d/groups/ssh/ssh
@@ -12,6 +12,7 @@ profile ssh @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
   include <abstractions/devices-usb>
+  include <abstractions/kerberosclient>
   include <abstractions/nameservice-strict>
 
   network inet stream,