selinux-refpolicy/policy/modules/system/userdomain.fc
cgzones 7d376d7e4d transition file contexts to /run
Remove file context aliases and update file context paths to use the /run filesystem path.
Add backward compatibility file context alias for /var/run using applications like https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783321
Lock files are still seated at /var/lock
2016-12-17 18:32:39 +01:00

13 lines
589 B
Plaintext

HOME_DIR -d gen_context(system_u:object_r:user_home_dir_t,s0-mls_systemhigh)
HOME_DIR/.+ gen_context(system_u:object_r:user_home_t,s0)
HOME_DIR/\.pki(/.*)? gen_context(system_u:object_r:user_cert_t,s0)
/tmp/gconfd-USER -d gen_context(system_u:object_r:user_tmp_t,s0)
/run/user -d gen_context(system_u:object_r:user_runtime_root_t,s0)
/run/user/[^/]+ -d gen_context(system_u:object_r:user_runtime_t,s0)
/run/user/[^/]+/.+ -d <<none>>
# new genhomedircon required for these patterns
/run/user/%{USERID} -d gen_context(system_u:object_r:user_runtime_t,s0)
/run/user/%{USERID}/.+ <<none>>