commit: a567c5599a2464d36d2665b6949ff84c0e1aa820
Author: Jason Zaman <jason <AT> perfinion <DOT> com>
AuthorDate: Sun Jun 24 09:56:08 2018 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Mon Jun 25 05:31:59 2018 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=a567c559
xdg: filetrans should not add filetrans from user_home_dir
SELinux 2.8 is stricter with duplicate filetrans and these rules cause
problems if a domain needs more than one xdg dir.
Domains should call xdg_generic_user_home_dir_filetrans_data directly if
needed.
policy/modules/system/xdg.if | 4 ----
1 file changed, 4 deletions(-)
diff --git a/policy/modules/system/xdg.if b/policy/modules/system/xdg.if
index 45d73f15..f59be0a0 100644
--- a/policy/modules/system/xdg.if
+++ b/policy/modules/system/xdg.if
@@ -146,7 +146,6 @@ interface(`xdg_cache_filetrans',`
filetrans_pattern($1, xdg_cache_t, $2, $3, $4)
xdg_create_cache_dirs($1)
- xdg_generic_user_home_dir_filetrans_cache($1, dir, ".cache")
')
########################################
@@ -397,8 +396,6 @@ interface(`xdg_config_filetrans',`
filetrans_pattern($1, xdg_config_t, $2, $3, $4)
xdg_create_config_dirs($1)
- xdg_generic_user_home_dir_filetrans_config($1, dir, ".config")
-
')
########################################
@@ -629,7 +626,6 @@ interface(`xdg_data_filetrans',`
filetrans_pattern($1, xdg_data_t, $2, $3, $4)
xdg_create_data_dirs($1)
- xdg_generic_user_home_dir_filetrans_data($1, dir, ".local")
')
########################################
