diff --git a/refpolicy/Makefile b/refpolicy/Makefile index db8c84e22..c4613c632 100644 --- a/refpolicy/Makefile +++ b/refpolicy/Makefile @@ -141,6 +141,7 @@ ALL_TE_FILES := $(ALL_MODULES) POST_TE_FILES := $(POLDIR)/users $(POLDIR)/constraints ALL_FC_FILES := $(ALL_MODULES:.te=.fc) +HOMEDIR_TEMPLATE = tmp/homedir_template POLICY_SECTIONS := tmp/pre_te_files.conf tmp/generated_definitions.conf tmp/all_interfaces.conf tmp/all_attrs_types.conf $(GLOBALTUN) tmp/only_te_rules.conf tmp/all_post.conf @@ -290,9 +291,12 @@ enableaudit: policy.conf # # Construct file_contexts # -$(FC): $(M4SUPPORT) $(ALL_FC_FILES) +$(FC): $(M4SUPPORT) tmp/generated_definitions.conf $(ALL_FC_FILES) $(FCSORT) @test -d tmp || mkdir -p tmp - $(QUIET) m4 $(M4PARAM) $^ > $@ + $(QUIET) m4 $(M4PARAM) $(M4SUPPORT) tmp/generated_definitions.conf $(ALL_FC_FILES) > tmp/$@.tmp + $(QUIET) grep -e HOME -e ROLE tmp/$@.tmp > $(HOMEDIR_TEMPLATE) + $(QUIET) sed -i -e /HOME/d -e /ROLE/d tmp/$@.tmp + $(QUIET) $(FCSORT) tmp/$@.tmp $@ ######################################## # @@ -301,9 +305,8 @@ $(FC): $(M4SUPPORT) $(ALL_FC_FILES) $(FCPATH): $(FC) $(USERPATH)/system.users @mkdir -p $(CONTEXTPATH)/files $(QUIET) install -m 644 $(FC) $(FCPATH) -# $(QUIET) install -m 644 $(HOMEDIR_TEMPLATE) $(HOMEDIRPATH) -# $(QUIET) $(GENHOMEDIRCON) -d $(TOPDIR) -t $(TYPE) $(USEPWD) - $(QUIET) $(FCSORT) $(FCPATH) $(FCPATH) + $(QUIET) install -m 644 $(HOMEDIR_TEMPLATE) $(HOMEDIRPATH) + $(QUIET) $(GENHOMEDIRCON) -d $(TOPDIR) -t $(NAME) $(USEPWD) ######################################## # diff --git a/refpolicy/policy/modules/apps/gpg.fc b/refpolicy/policy/modules/apps/gpg.fc index b7ef0df4e..03d0676d8 100644 --- a/refpolicy/policy/modules/apps/gpg.fc +++ b/refpolicy/policy/modules/apps/gpg.fc @@ -6,4 +6,4 @@ /usr/lib/gnupg/gpgkeys.* -- context_template(system_u:object_r:gpg_helper_exec_t,s0) -#HOME_DIR/\.gnupg(/.+)? context_template(system_u:object_r:ROLE_gpg_secret_t,s0) +HOME_DIR/\.gnupg(/.+)? context_template(system_u:object_r:ROLE_gpg_secret_t,s0)