2009-09-12 12:47:14

by nicky726

[permalink] [raw]
Subject: [refpolicy] Basic policy for KDE and Konqueror, third look

Hello,

I incorporated to my policy most of comments by Dominick Grift and
reorganized the konqueror.te structure according to this article:
http://danwalsh.livejournal.com/14442.html, therefore I send the
policy for further comments, so I could make it better.

P.S.

There is still isue because of type_transition in
files_kde_home_filetrans() interface. Dominick Grift suggests using
manage_files_pattern instead. The problem is, that only
manage_files_pattern is not enough for it to work corretly (or I have
there some mistake). type_transition or filetrans_pattern is needed,
as konqueror_home_t files reside in kde_shared_home_t directory and
when they are rewriten, they tend to keep kde_shared_home_t type,
which is not desired. Therefor I decided to keep the
filetrans_pattern, but if anyone could think of better working
solution, I'm ready to adopt it.

Thanks for your time,
Ondrej Vadinsky

--
"Don't it always seem to go
That you don't know what you've got
Till it's gone."

(Joni Mitchell)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: kde.fc
Type: application/octet-stream
Size: 192 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20090912/f2271f15/attachment.obj
-------------- next part --------------
A non-text attachment was scrubbed...
Name: kde.te
Type: application/octet-stream
Size: 248 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20090912/f2271f15/attachment-0001.obj
-------------- next part --------------
A non-text attachment was scrubbed...
Name: kde.if
Type: application/octet-stream
Size: 2782 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20090912/f2271f15/attachment-0002.obj
-------------- next part --------------
A non-text attachment was scrubbed...
Name: konqueror.fc
Type: application/octet-stream
Size: 659 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20090912/f2271f15/attachment-0003.obj
-------------- next part --------------
A non-text attachment was scrubbed...
Name: konqueror.te
Type: application/octet-stream
Size: 3646 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20090912/f2271f15/attachment-0004.obj
-------------- next part --------------
A non-text attachment was scrubbed...
Name: konqueror.if
Type: application/octet-stream
Size: 5037 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20090912/f2271f15/attachment-0005.obj