commit: 5e606ee00a9f96391f63fad8c2b127b41f1d8713
Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
AuthorDate: Sun Aug 10 16:58:59 2014 +0000
Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Sun Aug 10 16:58:59 2014 +0000
URL:
http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=5e606ee0
Layman needs manage rights on portage cache (write to /var/cache/edb) as well
as ebuild symlinks
---
policy/modules/contrib/portage.te | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/policy/modules/contrib/portage.te
b/policy/modules/contrib/portage.te
index 14a7b04..83d6ab4 100644
--- a/policy/modules/contrib/portage.te
+++ b/policy/modules/contrib/portage.te
@@ -390,8 +390,10 @@ gen_tunable(portage_mount_fs, false)
# Portage fetch local policy
#
+ manage_files_pattern(portage_fetch_t, portage_cache_t, portage_cache_t)
+ manage_dirs_pattern(portage_fetch_t, portage_cache_t, portage_cache_t)
read_lnk_files_pattern(portage_fetch_t, portage_conf_t, portage_conf_t)
- read_lnk_files_pattern(portage_fetch_t, portage_ebuild_t,
portage_ebuild_t)
+ manage_lnk_files_pattern(portage_fetch_t, portage_ebuild_t,
portage_ebuild_t)
dev_rw_autofs(portage_fetch_t)
