From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 8D43D13800E for ; Fri, 27 Jul 2012 10:12:02 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 6EAA4E0684; Fri, 27 Jul 2012 10:11:45 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id 40A63E0684 for ; Fri, 27 Jul 2012 10:11:45 +0000 (UTC) Received: from hornbill.gentoo.org (hornbill.gentoo.org [94.100.119.163]) (using TLSv1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 98E8A1B4015 for ; Fri, 27 Jul 2012 10:11:44 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by hornbill.gentoo.org (Postfix) with ESMTP id 34B2FE5440 for ; Fri, 27 Jul 2012 10:11:42 +0000 (UTC) From: "Sven Vermeulen" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Sven Vermeulen" Message-ID: <1343383863.e8f9229ea91def3d788c4a6c9f2b6434682cb735.SwifT@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/system/userdomain.if X-VCS-Directories: policy/modules/system/ X-VCS-Committer: SwifT X-VCS-Committer-Name: Sven Vermeulen X-VCS-Revision: e8f9229ea91def3d788c4a6c9f2b6434682cb735 X-VCS-Branch: master Date: Fri, 27 Jul 2012 10:11:42 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 363ec28f-c079-41ee-9926-b5ebc15188d4 X-Archives-Hash: ee9516f608e057f47e6914c69c01868f commit: e8f9229ea91def3d788c4a6c9f2b6434682cb735 Author: Sven Vermeulen siphos be> AuthorDate: Fri Jul 27 10:11:03 2012 +0000 Commit: Sven Vermeulen siphos be> CommitDate: Fri Jul 27 10:11:03 2012 +0000 URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=e8f9229e Update on xdg definitions --- policy/modules/system/userdomain.if | 20 +++++++++++--------- 1 files changed, 11 insertions(+), 9 deletions(-) diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if index b8f49d3..bc0148d 100644 --- a/policy/modules/system/userdomain.if +++ b/policy/modules/system/userdomain.if @@ -243,15 +243,17 @@ interface(`userdom_manage_home_role',` filetrans_pattern($2, user_home_dir_t, user_home_t, { dir file lnk_file sock_file fifo_file }) files_list_home($2) - # manage user xdg locations - xdg_manage_generic_cache_home_content($2) - xdg_manage_generic_config_home_content($2) - xdg_manage_generic_data_home_content($2) - xdg_manage_generic_runtime_home_content($2) - xdg_relabel_generic_cache_home_content($2) - xdg_relabel_generic_config_home_content($2) - xdg_relabel_generic_data_home_content($2) - xdg_relabel_generic_runtime_home_content($2) + # manage user xdg locations. Using _all here, but _generic is possible + # too if we don't want users to be able to manage application-specific + # content + xdg_manage_all_cache_home($2) + xdg_manage_all_config_home($2) + xdg_manage_all_data_home($2) + xdg_manage_all_runtime_home($2) + xdg_relabel_all_cache_home($2) + xdg_relabel_all_config_home($2) + xdg_relabel_all_data_home($2) + xdg_relabel_all_runtime_home($2) # cjp: this should probably be removed: allow $2 user_home_dir_t:dir { manage_dir_perms relabel_dir_perms };