duo_unix
duo_unix copied to clipboard
SELINUX: Add squid_port_t to the policy tunables
As Squid is a popular Forward Proxy platform, and security binaries should be compiled by trusted partners, add use of squid_port_t to the supplied SELINUX policy object.
Satisfies Issue #162
Issue number being addressed
Fixes #162
Summary of the change
Adds squid_port_t
to the list of ports allowed by the SELINUX policy tunables pam_duo_permit_sshd
and pam_duo_permit_local_login
.
Test Plan
Should be no different from current testing of forward proxies. We have internally validated this change at the University of Maine System.
We will likely bring this up with our paid support contact, so attention would be appreciated.
@AaronAtDuo While the work-around is working again, it is unreliable and this is technically the correct fix. We at the University of Maine System would appreciate it being applied.