PERFORCE change 44024 for review

[Chris Vance]

http://perforce.freebsd.org/chv.cgi?CH=44024

Change 44024 by cvance at cvance_korben on 2003/12/17 08:44:18

	Minor policy tweak

Affected files ...

.. //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/domains/program/ssh.te#5 edit

Differences ...

==== //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/domains/program/ssh.te#5 (text+ko) ====

@@ -117,6 +117,9 @@
 undefine(`sshd_program_domain')
 type sshd_key_t, file_type, sysadmfile;
 
+# Allow one-time passwords
+allow sshd_t opiekey_t:file rw_file_perms;
+
 # so a tunnel can point to another ssh tunnel...
 can_tcp_connect(sshd_t, sshd_t)