From: pebenito@ieee.org (Chris PeBenito)
Date: Sun, 24 Jun 2018 20:32:53 -0400
Subject: [refpolicy] [PATCH 2/5] xdg: filetrans should not add filetrans
 from user_home_dir
In-Reply-To: <20180624095611.48338-2-jason@perfinion.com>
References: <20180624095611.48338-1-jason@perfinion.com>
	<20180624095611.48338-2-jason@perfinion.com>
Message-ID: <f1cde580-c03b-d5d9-9fc9-3bb9394b36e8@ieee.org>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 06/24/2018 05:56 AM, Jason Zaman wrote:
> SELinux 2.8 is stricter with duplicate filetrans and these rules cause
> problems if a domain needs more than one xdg dir.
> 
> Domains should call xdg_generic_user_home_dir_filetrans_data directly if
> needed.
> ---
>   policy/modules/system/xdg.if | 4 ----
>   1 file changed, 4 deletions(-)
> 
> diff --git a/policy/modules/system/xdg.if b/policy/modules/system/xdg.if
> index f1439e2c..1bff4ae0 100644
> --- a/policy/modules/system/xdg.if
> +++ b/policy/modules/system/xdg.if
> @@ -146,7 +146,6 @@ interface(`xdg_cache_filetrans',`
>   	filetrans_pattern($1, xdg_cache_t, $2, $3, $4)
>   
>   	xdg_create_cache_dirs($1)
> -	xdg_generic_user_home_dir_filetrans_cache($1, dir, ".cache")
>   ')
>   
>   ########################################
> @@ -397,8 +396,6 @@ interface(`xdg_config_filetrans',`
>   	filetrans_pattern($1, xdg_config_t, $2, $3, $4)
>   
>   	xdg_create_config_dirs($1)
> -	xdg_generic_user_home_dir_filetrans_config($1, dir, ".config")
> -
>   ')
>   
>   ########################################
> @@ -629,7 +626,6 @@ interface(`xdg_data_filetrans',`
>   	filetrans_pattern($1, xdg_data_t, $2, $3, $4)
>   
>   	xdg_create_data_dirs($1)
> -	xdg_generic_user_home_dir_filetrans_data($1, dir, ".local")
>   ')
>   
>   ########################################

Merged.

-- 
Chris PeBenito