[Bug 1659905] New: Incorrect SELinux label of fontconfig cache directory

https://bugzilla.redhat.com/show_bug.cgi?id=1659905

            Bug ID: 1659905
           Summary: Incorrect SELinux label of fontconfig cache directory
           Product: Fedora
           Version: 29
            Status: NEW
         Component: fontconfig
          Assignee: tagoh(a)redhat.com
          Reporter: maciek.borzecki(a)gmail.com
        QA Contact: extras-qa(a)fedoraproject.org
                CC: ajax(a)redhat.com, fonts-bugs(a)lists.fedoraproject.org,
                    i18n-bugs(a)lists.fedoraproject.org,
                    john.j5live(a)gmail.com, mclasen(a)redhat.com,
                    pnemade(a)redhat.com, rhughes(a)redhat.com,
                    rstrode(a)redhat.com, sandmann(a)redhat.com,
                    tagoh(a)redhat.com
  Target Milestone: ---
    Classification: Fedora



Description of problem:

The /usr/lib/fontconfig/cache directly is labeled as lib_t, but should be
labeled as fonts_cache_t, same as /var/cache/fontconfig was before.

[guest@localhost ~]$ ls -laZ /usr/lib/fontconfig/cache/
total 40
drwxr-xr-x. 2 root root system_u:object_r:lib_t:s0      4096 Dec 17 07:35 .
drwxr-xr-x. 3 root root system_u:object_r:lib_t:s0      4096 Dec 17 07:35 ..
-rw-r--r--. 1 root root unconfined_u:object_r:lib_t:s0   136 Dec 17 07:35
14f2600e-0a03-4bcf-ad84-39369899c767-le64.cache-7
-rw-r--r--. 1 root root unconfined_u:object_r:lib_t:s0 20904 Dec 17 07:35
6d2e07ad-8b0a-44cf-ad7a-4c0d0bc787a2-le64.cache-7
-rw-r--r--. 1 root root unconfined_u:object_r:lib_t:s0   200 Dec 17 07:35
CACHEDIR.TAG

Either a missing piece of the core policy or /usr/lib/fontconfig/cache ought to
be created with proper labeling.

Version-Release number of selected component (if applicable):

fontconfig-2.13.1-3.fc29.x86_64
selinux-policy-3.14.2-44.fc29.noarch
selinux-policy-devel-3.14.2-44.fc29.noarch
selinux-policy-targeted-3.14.2-44.fc29.noarch

How reproducible:
always

-- 
You are receiving this mail because:
You are on the CC list for the bug.