[selinux-policy: 344/3172] start making genhomedircon work
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 19:34:38 UTC 2010
commit 92e928e1bdf165d60b090c95dfd7b26f6a35b5e1
Author: Chris PeBenito <cpebenito at tresys.com>
Date: Mon Jun 13 21:16:05 2005 +0000
start making genhomedircon work
refpolicy/Makefile | 13 ++++++++-----
refpolicy/policy/modules/apps/gpg.fc | 2 +-
2 files changed, 9 insertions(+), 6 deletions(-)
---
diff --git a/refpolicy/Makefile b/refpolicy/Makefile
index db8c84e..c4613c6 100644
--- a/refpolicy/Makefile
+++ b/refpolicy/Makefile
@@ -141,6 +141,7 @@ ALL_TE_FILES := $(ALL_MODULES)
POST_TE_FILES := $(POLDIR)/users $(POLDIR)/constraints
ALL_FC_FILES := $(ALL_MODULES:.te=.fc)
+HOMEDIR_TEMPLATE = tmp/homedir_template
POLICY_SECTIONS := tmp/pre_te_files.conf tmp/generated_definitions.conf tmp/all_interfaces.conf tmp/all_attrs_types.conf $(GLOBALTUN) tmp/only_te_rules.conf tmp/all_post.conf
@@ -290,9 +291,12 @@ enableaudit: policy.conf
#
# Construct file_contexts
#
-$(FC): $(M4SUPPORT) $(ALL_FC_FILES)
+$(FC): $(M4SUPPORT) tmp/generated_definitions.conf $(ALL_FC_FILES) $(FCSORT)
@test -d tmp || mkdir -p tmp
- $(QUIET) m4 $(M4PARAM) $^ > $@
+ $(QUIET) m4 $(M4PARAM) $(M4SUPPORT) tmp/generated_definitions.conf $(ALL_FC_FILES) > tmp/$@.tmp
+ $(QUIET) grep -e HOME -e ROLE tmp/$@.tmp > $(HOMEDIR_TEMPLATE)
+ $(QUIET) sed -i -e /HOME/d -e /ROLE/d tmp/$@.tmp
+ $(QUIET) $(FCSORT) tmp/$@.tmp $@
########################################
#
@@ -301,9 +305,8 @@ $(FC): $(M4SUPPORT) $(ALL_FC_FILES)
$(FCPATH): $(FC) $(USERPATH)/system.users
@mkdir -p $(CONTEXTPATH)/files
$(QUIET) install -m 644 $(FC) $(FCPATH)
-# $(QUIET) install -m 644 $(HOMEDIR_TEMPLATE) $(HOMEDIRPATH)
-# $(QUIET) $(GENHOMEDIRCON) -d $(TOPDIR) -t $(TYPE) $(USEPWD)
- $(QUIET) $(FCSORT) $(FCPATH) $(FCPATH)
+ $(QUIET) install -m 644 $(HOMEDIR_TEMPLATE) $(HOMEDIRPATH)
+ $(QUIET) $(GENHOMEDIRCON) -d $(TOPDIR) -t $(NAME) $(USEPWD)
########################################
#
diff --git a/refpolicy/policy/modules/apps/gpg.fc b/refpolicy/policy/modules/apps/gpg.fc
index b7ef0df..03d0676 100644
--- a/refpolicy/policy/modules/apps/gpg.fc
+++ b/refpolicy/policy/modules/apps/gpg.fc
@@ -6,4 +6,4 @@
/usr/lib/gnupg/gpgkeys.* -- context_template(system_u:object_r:gpg_helper_exec_t,s0)
-#HOME_DIR/\.gnupg(/.+)? context_template(system_u:object_r:ROLE_gpg_secret_t,s0)
+HOME_DIR/\.gnupg(/.+)? context_template(system_u:object_r:ROLE_gpg_secret_t,s0)
More information about the scm-commits
mailing list