[selinux-policy/f19] Add support for /home/<user>/.icedtea and label it as mozilla_home_t

Miroslav Grepl mgrepl at fedoraproject.org
Fri May 17 08:13:57 UTC 2013


commit 9c3f7b0713b5ffd82eda6ee885763858dabbb786
Author: Miroslav Grepl <mgrepl at redhat.com>
Date:   Fri May 17 10:13:44 2013 +0200

    Add support for /home/<user>/.icedtea and label it as mozilla_home_t

 policy-rawhide-contrib.patch |   10 ++++++----
 1 files changed, 6 insertions(+), 4 deletions(-)
---
diff --git a/policy-rawhide-contrib.patch b/policy-rawhide-contrib.patch
index 6a2197b..d4b02fd 100644
--- a/policy-rawhide-contrib.patch
+++ b/policy-rawhide-contrib.patch
@@ -36591,10 +36591,10 @@ index 4462c0e..84944d1 100644
  
  userdom_dontaudit_use_unpriv_user_fds(monopd_t)
 diff --git a/mozilla.fc b/mozilla.fc
-index 6ffaba2..90fd526 100644
+index 6ffaba2..640ff5e 100644
 --- a/mozilla.fc
 +++ b/mozilla.fc
-@@ -1,38 +1,63 @@
+@@ -1,38 +1,64 @@
 -HOME_DIR/\.galeon(/.*)?	gen_context(system_u:object_r:mozilla_home_t,s0)
 -HOME_DIR/\.mozilla(/.*)?	gen_context(system_u:object_r:mozilla_home_t,s0)
 -HOME_DIR/\.mozilla/plugins(/.*)?	gen_context(system_u:object_r:mozilla_plugin_home_t,s0)
@@ -36629,6 +36629,7 @@ index 6ffaba2..90fd526 100644
 +HOME_DIR/\.gcjwebplugin(/.*)?	gen_context(system_u:object_r:mozilla_home_t,s0)
 +HOME_DIR/\.grl-podcasts(/.*)?	gen_context(system_u:object_r:mozilla_home_t,s0)
 +HOME_DIR/\.icedteaplugin(/.*)?		gen_context(system_u:object_r:mozilla_home_t,s0)
++HOME_DIR/\..icedtea(/.*)?		gen_context(system_u:object_r:mozilla_home_t,s0)
 +HOME_DIR/\.lyx(/.*)?                   gen_context(system_u:object_r:mozilla_home_t,s0)
 +HOME_DIR/\.quakelive(/.*)?		gen_context(system_u:object_r:mozilla_home_t,s0)
 +HOME_DIR/\.spicec(/.*)?			gen_context(system_u:object_r:mozilla_home_t,s0)
@@ -36693,7 +36694,7 @@ index 6ffaba2..90fd526 100644
 +/usr/lib/nspluginwrapper/plugin-config			--	gen_context(system_u:object_r:mozilla_plugin_config_exec_t,s0)
 +')
 diff --git a/mozilla.if b/mozilla.if
-index 6194b80..116d9d2 100644
+index 6194b80..879f5db 100644
 --- a/mozilla.if
 +++ b/mozilla.if
 @@ -1,146 +1,75 @@
@@ -37332,7 +37333,7 @@ index 6194b80..116d9d2 100644
  ## </summary>
  ## <param name="domain">
  ##	<summary>
-@@ -530,45 +448,50 @@ interface(`mozilla_plugin_delete_tmpfs_files',`
+@@ -530,45 +448,51 @@ interface(`mozilla_plugin_delete_tmpfs_files',`
  ##	</summary>
  ## </param>
  #
@@ -37397,6 +37398,7 @@ index 6194b80..116d9d2 100644
 +	userdom_user_home_dir_filetrans($1, mozilla_home_t, dir, ".grl-podcasts")
 +	userdom_user_home_dir_filetrans($1, mozilla_home_t, dir, ".gcjwebplugin")
 +	userdom_user_home_dir_filetrans($1, mozilla_home_t, dir, ".icedteaplugin")
++	userdom_user_home_dir_filetrans($1, mozilla_home_t, dir, ".icedtea")
 +	userdom_user_home_dir_filetrans($1, mozilla_home_t, dir, ".quakelive")
 +	userdom_user_home_dir_filetrans($1, mozilla_home_t, dir, ".spicec")
 +	userdom_user_home_dir_filetrans($1, mozilla_home_t, dir, ".ICAClient")


More information about the scm-commits mailing list