From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Tue, 8 Nov 2011 10:11:54 -0500
Subject: [refpolicy] [PATCH 1/2] Support the console/graphical links
	browser
In-Reply-To: <4EB945F3.6000805@tresys.com>
References: <20111023142947.GA17397@siphos.be>
	<20111023143028.GB17397@siphos.be> <4EB945F3.6000805@tresys.com>
Message-ID: <4EB946BA.8080505@tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 11/08/11 10:08, Christopher J. PeBenito wrote:
> On 10/23/11 10:30, Sven Vermeulen wrote:
> 
> A couple small notes inline.

>> +type links_t;
>> +type links_exec_t;
>> +application_domain(links_t, links_exec_t)
>> +
>> +type links_home_t;
>> +typealias links_home_t alias { user_links_home_t staff_links_home_t sysadm_links_home_t };
>> +userdom_user_home_content(links_home_t)
>> +
>> +type links_tmpfs_t;
>> +typealias links_tmpfs_t alias { user_links_tmpfs_t staff_links_tmpfs_t sysadm_links_tmpfs_t };
>> +files_tmpfs_file(links_tmpfs_t)
>> +ubac_constrained(links_tmpfs_t)
> 
> The aliases aren't necessary.  They only exist in current policies for compatibility reasons.  Since this is a new module, there is no compatibility to preserve.

You should also update to use the new userdom interfaces for apps and tmpfs files, e.g. userdom_user_tmpfs_file().

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com