RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

genhomedircon: generate file contexts for %{USERNAME} and %{USERID} 

Generate substituted file contexts for templated paths containing
%{USERNAME} or %{USERID}, like semodules' genhomedircon.

Example:
  /run/user/%{USERID}  -d  gen_context(system_u:object_r:user_runtime_t,s0)
Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
This commit is contained in:
Christian Göttsche 2021-01-31 21:50:23 +01:00
parent cf8f7bbea7
commit 9e48ce1f2e
1 changed files with 17 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
support/genhomedircon.py
View File

@ -168,7 +168,6 @@ class selinuxConfig:
if rc[0] == 0: if rc[0] == 0:
users+=rc[1] users+=rc[1]
udict = {} udict = {}
prefs = {}
if users != "": if users != "":
ulist = users.split("\n") ulist = users.split("\n")
for u in ulist: for u in ulist:
@ -181,20 +180,31 @@ class selinuxConfig:
if role == "{": if role == "{":
role = user[4] role = user[4]
role = role.split("_r")[0] role = role.split("_r")[0]
home = pwd.getpwnam(user[1])[5] pwdentry = pwd.getpwnam(user[1])
home = pwdentry[5]
if home == "/": if home == "/":
continue continue
prefs = {} prefs = {}
prefs["role"] = role prefs["role"] = role
prefs["home"] = home prefs["home"] = home
prefs["name"] = pwdentry[0]
prefs["uid"] = pwdentry[2]
udict[user[1]] = prefs udict[user[1]] = prefs
except KeyError: except KeyError:
sys.stderr.write("The user \"%s\" is not present in the passwd file, skipping...\n" % user[1]) sys.stderr.write("The user \"%s\" is not present in the passwd file, skipping...\n" % user[1])
return udict return udict
def getHomeDirContext(self, user, home, role): def getHomeDirContext(self, seuser, home, role, username, userid):
ret="\n\n#\n# Context for user %s\n#\n\n" % user ret = "\n\n#\n# Context for user %s\n#\n\n" % seuser
rc=getstatusoutput("grep '^HOME_DIR' %s | sed -e 's|HOME_DIR|%s|' -e 's/ROLE/%s/' -e 's/system_u/%s/'" % (self.getHomeDirTemplate(), home, role, user)) rc = getstatusoutput("grep -E '^HOME_DIR|%%{USERID}|%%{USERNAME}' %s | sed"
" -e 's|HOME_DIR|%s|'"
" -e 's|ROLE|%s|'"
" -e 's|system_u|%s|'"
" -e 's|%%{USERID}|%s|'"
" -e 's|%%{USERNAME}|%s|'"
% (self.getHomeDirTemplate(), home, role, seuser, userid, username))
if rc[0] != 0:
errorExit("sed error (" + str(rc[0]) + "): " + rc[1])
return ret + rc[1] + "\n" return ret + rc[1] + "\n"
def genHomeDirContext(self): def genHomeDirContext(self):
@ -202,7 +212,7 @@ class selinuxConfig:
ret="" ret=""
# Fill in HOME and ROLE for users that are defined # Fill in HOME and ROLE for users that are defined
for u in users.keys(): for u in users.keys():
ret += self.getHomeDirContext (u, users[u]["home"], users[u]["role"]) ret += self.getHomeDirContext (u, users[u]["home"], users[u]["role"], users[u]["name"], users[u]["uid"])
return ret+"\n" return ret+"\n"
def checkExists(self, home): def checkExists(self, home):
@ -263,7 +273,7 @@ class selinuxConfig:
def genoutput(self): def genoutput(self):
ret= self.heading() ret= self.heading()
for h in self.getHomeDirs(): for h in self.getHomeDirs():
ret += self.getHomeDirContext ("user_u" , h+'/[^/]+', "user") ret += self.getHomeDirContext ("user_u" , h+'/[^/]+', "user", "[^/]+", "[0-9]+")
ret += self.getHomeRootContext(h) ret += self.getHomeRootContext(h)
ret += self.genHomeDirContext() ret += self.genHomeDirContext()
return ret return ret