#956356 pam-ssh-agent-auth: Please stop using deprecated <selinux/flask.h> and <selinux/av_permissions.h> headers

Package:
pam-ssh-agent-auth
Source:
pam-ssh-agent-auth
Submitter:
Date:
2025-08-17 17:49:01 UTC
Severity:
minor
Tags:
#956356#5
Date:
2020-04-10 08:17:23 UTC
From:
To:
Dear Maintainer,

Your package is using either <selinux/flask.h> and/or
<selinux/av_permissions.h> and hardcoded SELinux security classes or
permissions. This is deprecated for about 5 years and upstream has
now decided to remove these completely in the upcoming 3.1 release.

Your package should be ported to dynamically query the security
classes and permissions instead of relying on the hardcoded ones and
remove these headers.

I will bump the severity of this bug to serious when libselinux 3.1
is finally released as your package will FTBFS.

Don't hesitate to contact me if you have any questions.

Kind regards,

Laurent Bigonville
#956356#10
Date:
2020-04-10 08:44:01 UTC
From:
To:
severity 956356 minor
thanks

On Fri, 10 Apr 2020 10:17:23 +0200 bigon@debian.org wrote:


 > Dear Maintainer,
 >
 > Your package is using either <selinux/flask.h> and/or
 > <selinux/av_permissions.h> and hardcoded SELinux security classes or
 > permissions. This is deprecated for about 5 years and upstream has
 > now decided to remove these completely in the upcoming 3.1 release.
 >
 > Your package should be ported to dynamically query the security
 > classes and permissions instead of relying on the hardcoded ones and
 > remove these headers.
 >
 > I will bump the severity of this bug to serious when libselinux 3.1
 > is finally released as your package will FTBFS.
 >

SELinux support in the package is actually not enabled, so this is not
really a problem ATM.