diff options
| author |   Jason Zaman <jason@perfinion.com> | 2019-01-12 16:03:43 +0800 |
|---|---|---|
| committer | Jason Zaman <jason@perfinion.com> | 2019-02-10 12:11:25 +0800 |
| commit | ebbdea62e2a5ee04b6c4ecf78315dd133fa23023 (patch) | |
| tree | 20ab36e9c062890c7d8f31347c9ddb0aa61f24c5 | |
| parent | kernel: introduce kernel_dontaudit_read_kernel_sysctl (diff) | |
| download | hardened-refpolicy-ebbdea62.tar.gz hardened-refpolicy-ebbdea62.tar.bz2 hardened-refpolicy-ebbdea62.zip | |
userdomain: introduce userdom_user_home_dir_filetrans_user_cert
Signed-off-by: Jason Zaman <jason@perfinion.com>
| -rw-r--r-- | policy/modules/system/userdomain.if | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if index 3f380d40..7fe015de 100644 --- a/policy/modules/system/userdomain.if +++ b/policy/modules/system/userdomain.if @@ -2524,6 +2524,35 @@ interface(`userdom_user_home_content_filetrans',` ######################################## ## <summary> +## Automatically use the user_cert_t label for selected resources +## created in a users home directory +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access +## </summary> +## </param> +## <param name="class"> +## <summary> +## Resource type(s) for which the label should be used +## </summary> +## </param> +## <param name="filename" optional="true"> +## <summary> +## Name of the resource that is being created +## </summary> +## </param> +# +interface(`userdom_user_home_dir_filetrans_user_cert',` + gen_require(` + type user_cert_t; + ') + + userdom_user_home_dir_filetrans($1, user_cert_t, $2, $3) +') + +######################################## +## <summary> ## Create objects in a user home directory ## with an automatic type transition to ## the user home file type. |