[selinux-policy/f19] Add support for /home/<user>/.icedtea and label it as mozilla_home_t
Miroslav Grepl
mgrepl at fedoraproject.org
Fri May 17 08:13:57 UTC 2013
commit 9c3f7b0713b5ffd82eda6ee885763858dabbb786
Author: Miroslav Grepl <mgrepl at redhat.com>
Date: Fri May 17 10:13:44 2013 +0200
Add support for /home/<user>/.icedtea and label it as mozilla_home_t
policy-rawhide-contrib.patch | 10 ++++++----
1 files changed, 6 insertions(+), 4 deletions(-)
---
diff --git a/policy-rawhide-contrib.patch b/policy-rawhide-contrib.patch
index 6a2197b..d4b02fd 100644
--- a/policy-rawhide-contrib.patch
+++ b/policy-rawhide-contrib.patch
@@ -36591,10 +36591,10 @@ index 4462c0e..84944d1 100644
userdom_dontaudit_use_unpriv_user_fds(monopd_t)
diff --git a/mozilla.fc b/mozilla.fc
-index 6ffaba2..90fd526 100644
+index 6ffaba2..640ff5e 100644
--- a/mozilla.fc
+++ b/mozilla.fc
-@@ -1,38 +1,63 @@
+@@ -1,38 +1,64 @@
-HOME_DIR/\.galeon(/.*)? gen_context(system_u:object_r:mozilla_home_t,s0)
-HOME_DIR/\.mozilla(/.*)? gen_context(system_u:object_r:mozilla_home_t,s0)
-HOME_DIR/\.mozilla/plugins(/.*)? gen_context(system_u:object_r:mozilla_plugin_home_t,s0)
@@ -36629,6 +36629,7 @@ index 6ffaba2..90fd526 100644
+HOME_DIR/\.gcjwebplugin(/.*)? gen_context(system_u:object_r:mozilla_home_t,s0)
+HOME_DIR/\.grl-podcasts(/.*)? gen_context(system_u:object_r:mozilla_home_t,s0)
+HOME_DIR/\.icedteaplugin(/.*)? gen_context(system_u:object_r:mozilla_home_t,s0)
++HOME_DIR/\..icedtea(/.*)? gen_context(system_u:object_r:mozilla_home_t,s0)
+HOME_DIR/\.lyx(/.*)? gen_context(system_u:object_r:mozilla_home_t,s0)
+HOME_DIR/\.quakelive(/.*)? gen_context(system_u:object_r:mozilla_home_t,s0)
+HOME_DIR/\.spicec(/.*)? gen_context(system_u:object_r:mozilla_home_t,s0)
@@ -36693,7 +36694,7 @@ index 6ffaba2..90fd526 100644
+/usr/lib/nspluginwrapper/plugin-config -- gen_context(system_u:object_r:mozilla_plugin_config_exec_t,s0)
+')
diff --git a/mozilla.if b/mozilla.if
-index 6194b80..116d9d2 100644
+index 6194b80..879f5db 100644
--- a/mozilla.if
+++ b/mozilla.if
@@ -1,146 +1,75 @@
@@ -37332,7 +37333,7 @@ index 6194b80..116d9d2 100644
## </summary>
## <param name="domain">
## <summary>
-@@ -530,45 +448,50 @@ interface(`mozilla_plugin_delete_tmpfs_files',`
+@@ -530,45 +448,51 @@ interface(`mozilla_plugin_delete_tmpfs_files',`
## </summary>
## </param>
#
@@ -37397,6 +37398,7 @@ index 6194b80..116d9d2 100644
+ userdom_user_home_dir_filetrans($1, mozilla_home_t, dir, ".grl-podcasts")
+ userdom_user_home_dir_filetrans($1, mozilla_home_t, dir, ".gcjwebplugin")
+ userdom_user_home_dir_filetrans($1, mozilla_home_t, dir, ".icedteaplugin")
++ userdom_user_home_dir_filetrans($1, mozilla_home_t, dir, ".icedtea")
+ userdom_user_home_dir_filetrans($1, mozilla_home_t, dir, ".quakelive")
+ userdom_user_home_dir_filetrans($1, mozilla_home_t, dir, ".spicec")
+ userdom_user_home_dir_filetrans($1, mozilla_home_t, dir, ".ICAClient")
More information about the scm-commits
mailing list