From: jason@perfinion.com (Jason Zaman) Date: Sun, 24 Jun 2018 17:56:09 +0800 Subject: [refpolicy] [PATCH 3/5] xdg: Introduce xdg_search_cache_dirs In-Reply-To: <20180624095611.48338-1-jason@perfinion.com> References: <20180624095611.48338-1-jason@perfinion.com> Message-ID: <20180624095611.48338-3-jason@perfinion.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com --- policy/modules/system/xdg.if | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/policy/modules/system/xdg.if b/policy/modules/system/xdg.if index 1bff4ae0..11fc4306 100644 --- a/policy/modules/system/xdg.if +++ b/policy/modules/system/xdg.if @@ -63,6 +63,26 @@ interface(`xdg_data_content',` userdom_user_home_content($1) ') +######################################## +## +## Search through the xdg cache home directories +## +## +## +## Domain allowed access. +## +## +# +interface(`xdg_search_cache_dirs',` + gen_require(` + type xdg_cache_t; + ') + + search_dirs_pattern($1, xdg_cache_t, xdg_cache_t) + + userdom_search_user_home_dirs($1) +') + ######################################## ## ## Read the xdg cache home files -- 2.16.4