refpolicy icon indicating copy to clipboard operation
refpolicy copied to clipboard

Possible revisions to sshd policy due to component separation

Open 0xC0ncord opened this issue 7 months ago • 2 comments

As mentioned in https://github.com/SELinuxProject/refpolicy/pull/793, OpenSSH is reworking the sshd binary by splitting some of its functionality into separate components. This started with OpenSSH 9.8 by splitting the SSH protocol and listening functionality into ssh-session and sshd respectively. According to the changelog, there are plans to further separate sshd into separate components.

We should watch these coming changes and consider reworking the policy for sshd to cover these components individually.

0xC0ncord avatar Jul 15 '24 15:07 0xC0ncord