From: jason@perfinion.com (Jason Zaman) Date: Thu, 14 Dec 2017 02:17:22 +0800 Subject: [refpolicy] [PATCH 5/5] Set user_runtime_content_type for all remaining types in /run/user/%{UID}/ In-Reply-To: <20171213181722.28545-1-jason@perfinion.com> References: <20171213181722.28545-1-jason@perfinion.com> Message-ID: <20171213181722.28545-5-jason@perfinion.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com --- dbus.te | 1 + dirmngr.te | 1 + gnome.te | 2 ++ gpg.te | 2 ++ pulseaudio.te | 1 + 5 files changed, 7 insertions(+) diff --git a/dbus.te b/dbus.te index 05c4652..8c9288b 100644 --- a/dbus.te +++ b/dbus.te @@ -49,6 +49,7 @@ init_daemon_pid_file(system_dbusd_var_run_t, dir, "dbus") type session_dbusd_runtime_t; files_pid_file(session_dbusd_runtime_t) +userdom_user_runtime_content(session_dbusd_runtime_t) ifdef(`enable_mcs',` init_ranged_system_domain(system_dbusd_t, dbusd_exec_t, s0 - mcs_systemhigh) diff --git a/dirmngr.te b/dirmngr.te index 75833a4..fa5898e 100644 --- a/dirmngr.te +++ b/dirmngr.te @@ -20,6 +20,7 @@ logging_log_file(dirmngr_log_t) type dirmngr_tmp_t; userdom_user_tmp_file(dirmngr_tmp_t) +userdom_user_runtime_content(dirmngr_tmp_t) type dirmngr_var_lib_t; files_type(dirmngr_var_lib_t) diff --git a/gnome.te b/gnome.te index d87daab..b816175 100644 --- a/gnome.te +++ b/gnome.te @@ -45,9 +45,11 @@ userdom_user_home_content(gnome_keyring_home_t) type gnome_keyring_tmp_t; userdom_user_tmp_file(gnome_keyring_tmp_t) +userdom_user_runtime_content(gnome_keyring_tmp_t) type gstreamer_orcexec_t; application_executable_file(gstreamer_orcexec_t) +userdom_user_runtime_content(gstreamer_orcexec_t) ############################## # diff --git a/gpg.te b/gpg.te index 0ad774e..6fc19ca 100644 --- a/gpg.te +++ b/gpg.te @@ -39,6 +39,7 @@ role gpg_roles types gpg_t; type gpg_runtime_t; files_pid_file(gpg_runtime_t) +userdom_user_runtime_content(gpg_runtime_t) type gpg_agent_t; type gpg_agent_exec_t; @@ -47,6 +48,7 @@ role gpg_agent_roles types gpg_agent_t; type gpg_agent_tmp_t; userdom_user_tmp_file(gpg_agent_tmp_t) +userdom_user_runtime_content(gpg_agent_tmp_t) type gpg_secret_t; userdom_user_home_content(gpg_secret_t) diff --git a/pulseaudio.te b/pulseaudio.te index 441d058..8c8e21e 100644 --- a/pulseaudio.te +++ b/pulseaudio.te @@ -29,6 +29,7 @@ userdom_user_home_content(pulseaudio_home_t) type pulseaudio_tmp_t; userdom_user_tmp_file(pulseaudio_tmp_t) +userdom_user_runtime_content(pulseaudio_tmp_t) type pulseaudio_tmpfs_t; userdom_user_tmpfs_file(pulseaudio_tmpfs_t) -- 2.13.6