f9c83f65d7
Introduce a new file context for user certificates (user_cert_t) located in home directories. Introduce new auxiliary interfaces to read and manage such files files and directories. Thanks to Christopher PeBenito for the useful suggestions that led to this improved version of the patch. Compared to the previous version, this patch adds the ability to search the user home directories in the new interfaces. Signed-off-by: Guido Trentalancia <guido@trentalancia.net>
13 lines
609 B
Plaintext
13 lines
609 B
Plaintext
HOME_DIR -d gen_context(system_u:object_r:user_home_dir_t,s0-mls_systemhigh)
|
|
HOME_DIR/.+ gen_context(system_u:object_r:user_home_t,s0)
|
|
HOME_DIR/\.pki(/.*)? gen_context(system_u:object_r:user_cert_t,s0)
|
|
|
|
/tmp/gconfd-USER -d gen_context(system_u:object_r:user_tmp_t,s0)
|
|
|
|
/var/run/user -d gen_context(system_u:object_r:user_runtime_root_t,s0)
|
|
/var/run/user/[^/]+ -d gen_context(system_u:object_r:user_runtime_t,s0)
|
|
/var/run/user/[^/]+/.+ -d <<none>>
|
|
# new genhomedircon required for these patterns
|
|
/var/run/user/%{USERID} -d gen_context(system_u:object_r:user_runtime_t,s0)
|
|
/var/run/user/%{USERID}/.+ <<none>>
|