From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Mon, 3 Oct 2011 21:48:24 +0200 Subject: [refpolicy] [PATCH 4/4] Allow users to manage their xdg_* locations In-Reply-To: <20111003194606.GA7129@siphos.be> References: <20111003194606.GA7129@siphos.be> Message-ID: <20111003194824.GE7129@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com The xdg locations as defined under the xdg module are all within a users' HOMEDIR. We allow the user to administer his xdg_* files. Signed-off-by: Sven Vermeulen --- policy/modules/system/userdomain.if | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-) diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if index c6d3cc8..f7f7d44 100644 --- a/policy/modules/system/userdomain.if +++ b/policy/modules/system/userdomain.if @@ -267,6 +267,10 @@ interface(`userdom_manage_home_role',` fs_dontaudit_manage_cifs_dirs($2) fs_dontaudit_manage_cifs_files($2) ') + + optional_policy(` + xdg_admin($2) + ') ') ####################################### -- 1.7.3.4