From eba72de614d289e588e3f54a259c1c0c163bba85 Mon Sep 17 00:00:00 2001 From: Andreas Freimuth Date: Sat, 26 Jun 2021 12:04:02 +0200 Subject: [PATCH 1/2] Prefer user_fonts_config_t over xdg_config_t Signed-off-by: Andreas Freimuth --- policy/modules/services/xserver.fc | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/services/xserver.fc b/policy/modules/services/xserver.fc index df06151e1..266886bb7 100644 --- a/policy/modules/services/xserver.fc +++ b/policy/modules/services/xserver.fc @@ -4,6 +4,7 @@ HOME_DIR/\.cache/mesa_shader_cache(/.*)? gen_context(system_u:object_r:mesa_shader_cache_t,s0) HOME_DIR/\.cache/fontconfig(/.*)? gen_context(system_u:object_r:user_fonts_cache_t,s0) HOME_DIR/\.dmrc -- gen_context(system_u:object_r:dmrc_home_t,s0) +HOME_DIR/\.config/fontconfig/fonts\.conf -- gen_context(system_u:object_r:user_fonts_config_t,s0) HOME_DIR/\.fonts\.conf -- gen_context(system_u:object_r:user_fonts_config_t,s0) HOME_DIR/\.fonts(/.*)? gen_context(system_u:object_r:user_fonts_t,s0) HOME_DIR/\.fonts/auto(/.*)? gen_context(system_u:object_r:user_fonts_cache_t,s0) From 064e88aef519f080d9a8f8964d525703b1f10141 Mon Sep 17 00:00:00 2001 From: Andreas Freimuth Date: Sat, 26 Jun 2021 12:18:09 +0200 Subject: [PATCH 2/2] Set user_fonts_config_t for conf.d Signed-off-by: Andreas Freimuth --- policy/modules/services/xserver.fc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/services/xserver.fc b/policy/modules/services/xserver.fc index 266886bb7..f90ceb9ef 100644 --- a/policy/modules/services/xserver.fc +++ b/policy/modules/services/xserver.fc @@ -4,7 +4,9 @@ HOME_DIR/\.cache/mesa_shader_cache(/.*)? gen_context(system_u:object_r:mesa_shader_cache_t,s0) HOME_DIR/\.cache/fontconfig(/.*)? gen_context(system_u:object_r:user_fonts_cache_t,s0) HOME_DIR/\.dmrc -- gen_context(system_u:object_r:dmrc_home_t,s0) +HOME_DIR/\.config/fontconfig/conf\.d(/.*)? -- gen_context(system_u:object_r:user_fonts_config_t,s0) HOME_DIR/\.config/fontconfig/fonts\.conf -- gen_context(system_u:object_r:user_fonts_config_t,s0) +HOME_DIR/\.fonts\.conf\.d(/.*)? -- gen_context(system_u:object_r:user_fonts_config_t,s0) HOME_DIR/\.fonts\.conf -- gen_context(system_u:object_r:user_fonts_config_t,s0) HOME_DIR/\.fonts(/.*)? gen_context(system_u:object_r:user_fonts_t,s0) HOME_DIR/\.fonts/auto(/.*)? gen_context(system_u:object_r:user_fonts_cache_t,s0)