# ssh
/usr/bin/ssh -- system_u:object_r:ssh_exec_t:s0
/usr/libexec/openssh/ssh-keysign -- system_u:object_r:ssh_keysign_exec_t:s0
/usr/bin/ssh-keygen -- system_u:object_r:ssh_keygen_exec_t:s0
# sshd
/etc/ssh/primes -- system_u:object_r:sshd_key_t:s0
/etc/ssh/ssh_host_key -- system_u:object_r:sshd_key_t:s0
/etc/ssh/ssh_host_dsa_key -- system_u:object_r:sshd_key_t:s0
/etc/ssh/ssh_host_rsa_key -- system_u:object_r:sshd_key_t:s0
/usr/sbin/sshd -- system_u:object_r:sshd_exec_t:s0
/var/run/sshd\.init\.pid -- system_u:object_r:sshd_var_run_t:s0
# subsystems
/usr/lib(64)?/misc/sftp-server -- system_u:object_r:bin_t:s0
/usr/libexec/openssh/sftp-server -- system_u:object_r:bin_t:s0
/usr/lib(64)?/sftp-server -- system_u:object_r:bin_t:s0
ifdef(`distro_suse', `
/usr/lib(64)?/ssh/.* -- system_u:object_r:bin_t:s0
')
ifdef(`targeted_policy', `', `
HOME_DIR/\.ssh(/.*)? system_u:object_r:ROLE_home_ssh_t:s0
')