1 |
commit: c5fa34fb27569f5e6710a0b323221219e03b025c |
2 |
Author: Guido Trentalancia <guido <AT> trentalancia <DOT> com> |
3 |
AuthorDate: Fri Aug 25 16:51:24 2017 +0000 |
4 |
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> |
5 |
CommitDate: Fri Sep 8 22:48:51 2017 +0000 |
6 |
URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=c5fa34fb |
7 |
|
8 |
libmtp: read symlinks in user home directories |
9 |
|
10 |
Let libmtp read symbolic links in the user home |
11 |
directories, if the "libmtp_enable_home_dirs" |
12 |
boolean is enabled. |
13 |
|
14 |
Signed-off-by: Guido Trentalancia <guido <AT> trentalancia.com> |
15 |
|
16 |
policy/modules/contrib/libmtp.te | 5 +++-- |
17 |
1 file changed, 3 insertions(+), 2 deletions(-) |
18 |
|
19 |
diff --git a/policy/modules/contrib/libmtp.te b/policy/modules/contrib/libmtp.te |
20 |
index 64c851e3..bacfb1b7 100644 |
21 |
--- a/policy/modules/contrib/libmtp.te |
22 |
+++ b/policy/modules/contrib/libmtp.te |
23 |
@@ -7,8 +7,8 @@ policy_module(libmtp, 1.0.0) |
24 |
|
25 |
## <desc> |
26 |
## <p> |
27 |
-## Determine whether libmtp can |
28 |
-## manage the user home directories |
29 |
+## Determine whether libmtp can read |
30 |
+## and manage the user home directories |
31 |
## and files. |
32 |
## </p> |
33 |
## </desc> |
34 |
@@ -55,5 +55,6 @@ optional_policy(` |
35 |
|
36 |
tunable_policy(`libmtp_enable_home_dirs',` |
37 |
userdom_manage_user_home_content_files(libmtp_t) |
38 |
+ userdom_read_user_home_content_symlinks(libmtp_t) |
39 |
userdom_user_home_dir_filetrans_user_home_content(libmtp_t, file ) |
40 |
') |