aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristian Göttsche <cgzones@googlemail.com>2021-01-31 21:50:18 +0100
committerJason Zaman <perfinion@gentoo.org>2021-02-06 12:54:11 -0800
commit8f9a8d44ce4ec0d2229d5bd9363a56621416676c (patch)
treefd3e21c16550c7c57df62510111268b2a9523666
parentgenhomedircon: drop backwards compatibility section (diff)
downloadhardened-refpolicy-8f9a8d44ce4ec0d2229d5bd9363a56621416676c.tar.gz
hardened-refpolicy-8f9a8d44ce4ec0d2229d5bd9363a56621416676c.tar.bz2
hardened-refpolicy-8f9a8d44ce4ec0d2229d5bd9363a56621416676c.zip
genhomedircon: require match for home directory name
Use regular expression '/[^/]+' instead of '/[^/]*', like semodule's genhomedircon. Generates file contexts like '/home/[^/]+/dead\.letter' Signed-off-by: Christian Göttsche <cgzones@googlemail.com> Signed-off-by: Jason Zaman <perfinion@gentoo.org>
-rw-r--r--support/genhomedircon.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/support/genhomedircon.py b/support/genhomedircon.py
index e9d72067..54745730 100644
--- a/support/genhomedircon.py
+++ b/support/genhomedircon.py
@@ -266,7 +266,7 @@ class selinuxConfig:
def genoutput(self):
ret= self.heading()
for h in self.getHomeDirs():
- ret += self.getHomeDirContext ("user_u" , h+'/[^/]*', "user")
+ ret += self.getHomeDirContext ("user_u" , h+'/[^/]+', "user")
ret += self.getHomeRootContext(h)
ret += self.genHomeDirContext()
return ret