From mboxrd@z Thu Jan 1 00:00:00 1970
Return-Path: <gentoo-commits+bounces-489527-garchives=archives.gentoo.org@lists.gentoo.org>
Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80])
by finch.gentoo.org (Postfix) with ESMTP id 8D43D13800E
for <garchives@archives.gentoo.org>; Fri, 27 Jul 2012 10:12:02 +0000 (UTC)
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
by pigeon.gentoo.org (Postfix) with SMTP id 6EAA4E0684;
Fri, 27 Jul 2012 10:11:45 +0000 (UTC)
Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183])
by pigeon.gentoo.org (Postfix) with ESMTP id 40A63E0684
for <gentoo-commits@lists.gentoo.org>; Fri, 27 Jul 2012 10:11:45 +0000 (UTC)
Received: from hornbill.gentoo.org (hornbill.gentoo.org [94.100.119.163])
(using TLSv1 with cipher AECDH-AES256-SHA (256/256 bits))
(No client certificate requested)
by smtp.gentoo.org (Postfix) with ESMTPS id 98E8A1B4015
for <gentoo-commits@lists.gentoo.org>; Fri, 27 Jul 2012 10:11:44 +0000 (UTC)
Received: from localhost.localdomain (localhost [127.0.0.1])
by hornbill.gentoo.org (Postfix) with ESMTP id 34B2FE5440
for <gentoo-commits@lists.gentoo.org>; Fri, 27 Jul 2012 10:11:42 +0000 (UTC)
From: "Sven Vermeulen" <sven.vermeulen@siphos.be>
To: gentoo-commits@lists.gentoo.org
Content-Transfer-Encoding: 8bit
Content-type: text/plain; charset=UTF-8
Reply-To: gentoo-dev@lists.gentoo.org, "Sven Vermeulen" <sven.vermeulen@siphos.be>
Message-ID: <1343383863.e8f9229ea91def3d788c4a6c9f2b6434682cb735.SwifT@gentoo>
Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/
X-VCS-Repository: proj/hardened-refpolicy
X-VCS-Files: policy/modules/system/userdomain.if
X-VCS-Directories: policy/modules/system/
X-VCS-Committer: SwifT
X-VCS-Committer-Name: Sven Vermeulen
X-VCS-Revision: e8f9229ea91def3d788c4a6c9f2b6434682cb735
X-VCS-Branch: master
Date: Fri, 27 Jul 2012 10:11:42 +0000 (UTC)
Precedence: bulk
List-Post: <mailto:gentoo-commits@lists.gentoo.org>
List-Help: <mailto:gentoo-commits+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-commits+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-commits+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-commits.gentoo.org>
X-BeenThere: gentoo-commits@lists.gentoo.org
X-Archives-Salt: 363ec28f-c079-41ee-9926-b5ebc15188d4
X-Archives-Hash: ee9516f608e057f47e6914c69c01868f
commit: e8f9229ea91def3d788c4a6c9f2b6434682cb735
Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
AuthorDate: Fri Jul 27 10:11:03 2012 +0000
Commit: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
CommitDate: Fri Jul 27 10:11:03 2012 +0000
URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=e8f9229e
Update on xdg definitions
---
policy/modules/system/userdomain.if | 20 +++++++++++---------
1 files changed, 11 insertions(+), 9 deletions(-)
diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if
index b8f49d3..bc0148d 100644
--- a/policy/modules/system/userdomain.if
+++ b/policy/modules/system/userdomain.if
@@ -243,15 +243,17 @@ interface(`userdom_manage_home_role',`
filetrans_pattern($2, user_home_dir_t, user_home_t, { dir file lnk_file sock_file fifo_file })
files_list_home($2)
- # manage user xdg locations
- xdg_manage_generic_cache_home_content($2)
- xdg_manage_generic_config_home_content($2)
- xdg_manage_generic_data_home_content($2)
- xdg_manage_generic_runtime_home_content($2)
- xdg_relabel_generic_cache_home_content($2)
- xdg_relabel_generic_config_home_content($2)
- xdg_relabel_generic_data_home_content($2)
- xdg_relabel_generic_runtime_home_content($2)
+ # manage user xdg locations. Using _all here, but _generic is possible
+ # too if we don't want users to be able to manage application-specific
+ # content
+ xdg_manage_all_cache_home($2)
+ xdg_manage_all_config_home($2)
+ xdg_manage_all_data_home($2)
+ xdg_manage_all_runtime_home($2)
+ xdg_relabel_all_cache_home($2)
+ xdg_relabel_all_config_home($2)
+ xdg_relabel_all_data_home($2)
+ xdg_relabel_all_runtime_home($2)
# cjp: this should probably be removed:
allow $2 user_home_dir_t:dir { manage_dir_perms relabel_dir_perms };