refpolicy
refpolicy copied to clipboard
Possible revisions to sshd policy due to component separation
As mentioned in https://github.com/SELinuxProject/refpolicy/pull/793, OpenSSH is reworking the sshd
binary by splitting some of its functionality into separate components. This started with OpenSSH 9.8 by splitting the SSH protocol and listening functionality into ssh-session
and sshd
respectively. According to the changelog, there are plans to further separate sshd
into separate components.
We should watch these coming changes and consider reworking the policy for sshd
to cover these components individually.