From: nicky726@gmail.com (Nicky 726) Date: Sat, 12 Sep 2009 14:47:14 +0200 Subject: [refpolicy] Basic policy for KDE and Konqueror, third look Message-ID: To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Hello, I incorporated to my policy most of comments by Dominick Grift and reorganized the konqueror.te structure according to this article: http://danwalsh.livejournal.com/14442.html, therefore I send the policy for further comments, so I could make it better. P.S. There is still isue because of type_transition in files_kde_home_filetrans() interface. Dominick Grift suggests using manage_files_pattern instead. The problem is, that only manage_files_pattern is not enough for it to work corretly (or I have there some mistake). type_transition or filetrans_pattern is needed, as konqueror_home_t files reside in kde_shared_home_t directory and when they are rewriten, they tend to keep kde_shared_home_t type, which is not desired. Therefor I decided to keep the filetrans_pattern, but if anyone could think of better working solution, I'm ready to adopt it. Thanks for your time, Ondrej Vadinsky -- "Don't it always seem to go That you don't know what you've got Till it's gone." (Joni Mitchell) -------------- next part -------------- A non-text attachment was scrubbed... Name: kde.fc Type: application/octet-stream Size: 192 bytes Desc: not available Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20090912/f2271f15/attachment.obj -------------- next part -------------- A non-text attachment was scrubbed... Name: kde.te Type: application/octet-stream Size: 248 bytes Desc: not available Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20090912/f2271f15/attachment-0001.obj -------------- next part -------------- A non-text attachment was scrubbed... Name: kde.if Type: application/octet-stream Size: 2782 bytes Desc: not available Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20090912/f2271f15/attachment-0002.obj -------------- next part -------------- A non-text attachment was scrubbed... Name: konqueror.fc Type: application/octet-stream Size: 659 bytes Desc: not available Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20090912/f2271f15/attachment-0003.obj -------------- next part -------------- A non-text attachment was scrubbed... Name: konqueror.te Type: application/octet-stream Size: 3646 bytes Desc: not available Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20090912/f2271f15/attachment-0004.obj -------------- next part -------------- A non-text attachment was scrubbed... Name: konqueror.if Type: application/octet-stream Size: 5037 bytes Desc: not available Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20090912/f2271f15/attachment-0005.obj