From: pebenito@ieee.org (Chris PeBenito)
Date: Wed, 13 Dec 2017 18:22:33 -0500
Subject: [refpolicy] [PATCH 5/5] Set user_runtime_content_type for all
 remaining types in /run/user/%{UID}/
In-Reply-To: <20171213181722.28545-5-jason@perfinion.com>
References: <20171213181722.28545-1-jason@perfinion.com>
	<20171213181722.28545-5-jason@perfinion.com>
Message-ID: <6f6fb8f9-aa6f-addf-87b6-c2d8103d29f2@ieee.org>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 12/13/2017 01:17 PM, Jason Zaman wrote:
> ---
>   dbus.te       | 1 +
>   dirmngr.te    | 1 +
>   gnome.te      | 2 ++
>   gpg.te        | 2 ++
>   pulseaudio.te | 1 +
>   5 files changed, 7 insertions(+)
> 
> diff --git a/dbus.te b/dbus.te
> index 05c4652..8c9288b 100644
> --- a/dbus.te
> +++ b/dbus.te
> @@ -49,6 +49,7 @@ init_daemon_pid_file(system_dbusd_var_run_t, dir, "dbus")
>   
>   type session_dbusd_runtime_t;
>   files_pid_file(session_dbusd_runtime_t)
> +userdom_user_runtime_content(session_dbusd_runtime_t)
>   
>   ifdef(`enable_mcs',`
>   	init_ranged_system_domain(system_dbusd_t, dbusd_exec_t, s0 - mcs_systemhigh)
> diff --git a/dirmngr.te b/dirmngr.te
> index 75833a4..fa5898e 100644
> --- a/dirmngr.te
> +++ b/dirmngr.te
> @@ -20,6 +20,7 @@ logging_log_file(dirmngr_log_t)
>   
>   type dirmngr_tmp_t;
>   userdom_user_tmp_file(dirmngr_tmp_t)
> +userdom_user_runtime_content(dirmngr_tmp_t)
>   
>   type dirmngr_var_lib_t;
>   files_type(dirmngr_var_lib_t)
> diff --git a/gnome.te b/gnome.te
> index d87daab..b816175 100644
> --- a/gnome.te
> +++ b/gnome.te
> @@ -45,9 +45,11 @@ userdom_user_home_content(gnome_keyring_home_t)
>   
>   type gnome_keyring_tmp_t;
>   userdom_user_tmp_file(gnome_keyring_tmp_t)
> +userdom_user_runtime_content(gnome_keyring_tmp_t)
>   
>   type gstreamer_orcexec_t;
>   application_executable_file(gstreamer_orcexec_t)
> +userdom_user_runtime_content(gstreamer_orcexec_t)
>   
>   ##############################
>   #
> diff --git a/gpg.te b/gpg.te
> index 0ad774e..6fc19ca 100644
> --- a/gpg.te
> +++ b/gpg.te
> @@ -39,6 +39,7 @@ role gpg_roles types gpg_t;
>   
>   type gpg_runtime_t;
>   files_pid_file(gpg_runtime_t)
> +userdom_user_runtime_content(gpg_runtime_t)
>   
>   type gpg_agent_t;
>   type gpg_agent_exec_t;
> @@ -47,6 +48,7 @@ role gpg_agent_roles types gpg_agent_t;
>   
>   type gpg_agent_tmp_t;
>   userdom_user_tmp_file(gpg_agent_tmp_t)
> +userdom_user_runtime_content(gpg_agent_tmp_t)
>   
>   type gpg_secret_t;
>   userdom_user_home_content(gpg_secret_t)
> diff --git a/pulseaudio.te b/pulseaudio.te
> index 441d058..8c8e21e 100644
> --- a/pulseaudio.te
> +++ b/pulseaudio.te
> @@ -29,6 +29,7 @@ userdom_user_home_content(pulseaudio_home_t)
>   
>   type pulseaudio_tmp_t;
>   userdom_user_tmp_file(pulseaudio_tmp_t)
> +userdom_user_runtime_content(pulseaudio_tmp_t)
>   
>   type pulseaudio_tmpfs_t;
>   userdom_user_tmpfs_file(pulseaudio_tmpfs_t)

Merged.

-- 
Chris PeBenito