[selinux-policy: 118/3172] add read fonts

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 19:15:17 UTC 2010


commit ec81ecb30c9d5dbb1363474c890b665fc1572682
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Thu May 5 21:36:53 2005 +0000

    add read fonts

 refpolicy/policy/modules/system/miscfiles.if |   19 +++++++++++++++++++
 1 files changed, 19 insertions(+), 0 deletions(-)
---
diff --git a/refpolicy/policy/modules/system/miscfiles.if b/refpolicy/policy/modules/system/miscfiles.if
index dc37d08..a9755a7 100644
--- a/refpolicy/policy/modules/system/miscfiles.if
+++ b/refpolicy/policy/modules/system/miscfiles.if
@@ -2,6 +2,25 @@
 
 ########################################
 #
+# miscfiles_read_fonts(domain)
+#
+define(`miscfiles_read_fonts',`
+requires_block_template(`$0'_depend)
+# FIXME: search usr_t dir
+# FIXME: search lib_t dir
+# cjp: fonts can be in either of the above dirs
+allow $1 fonts_t:dir { getattr read search };
+allow $1 fonts_t:file { getattr read };
+')
+
+define(`miscfiles_read_fonts_depend',`
+type fonts_t;
+class dir { getattr read search };
+class file { getattr read };
+')
+
+########################################
+#
 # miscfiles_read_localization(domain)
 #
 define(`miscfiles_read_localization',`


More information about the scm-commits mailing list