From: pebenito@ieee.org (Chris PeBenito) Date: Tue, 29 Aug 2017 18:47:00 -0400 Subject: [refpolicy] [PATCH] libmtp: read symlinks in user home directories In-Reply-To: <1503679884.15096.1.camel@trentalancia.com> References: <1503679884.15096.1.camel@trentalancia.com> Message-ID: <6da32ea0-f507-9755-7222-91bb224633cf@ieee.org> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 08/25/2017 12:51 PM, Guido Trentalancia via refpolicy wrote: > Let libmtp read symbolic links in the user home > directories, if the "libmtp_enable_home_dirs" > boolean is enabled. > > Signed-off-by: Guido Trentalancia > --- > policy/modules/contrib/libmtp.te | 5 +++-- > 1 file changed, 3 insertions(+), 2 deletions(-) > > --- a/policy/modules/contrib/libmtp.te 2017-05-23 21:34:17.370592081 +0200 > +++ b/policy/modules/contrib/libmtp.te 2017-08-25 18:42:18.857568428 +0200 > @@ -7,8 +7,8 @@ policy_module(libmtp, 1.0.0) > > ## > ##

> -## Determine whether libmtp can > -## manage the user home directories > +## Determine whether libmtp can read > +## and manage the user home directories > ## and files. > ##

> ##
> @@ -55,5 +55,6 @@ optional_policy(` > > tunable_policy(`libmtp_enable_home_dirs',` > userdom_manage_user_home_content_files(libmtp_t) > + userdom_read_user_home_content_symlinks(libmtp_t) > userdom_user_home_dir_filetrans_user_home_content(libmtp_t, file ) > ') Merged. -- Chris PeBenito