Gentoo Archives: gentoo-commits

From: Jason Zaman <perfinion@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/
Date: Sun, 30 Jan 2022 01:22:53
Message-Id: 1643505162.c57bb49065554c2efa1f8bf8a6854eaeb0588d31.perfinion@gentoo
1 commit: c57bb49065554c2efa1f8bf8a6854eaeb0588d31
2 Author: Kenton Groombridge <me <AT> concord <DOT> sh>
3 AuthorDate: Thu Jan 6 23:24:35 2022 +0000
4 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
5 CommitDate: Sun Jan 30 01:12:42 2022 +0000
6 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=c57bb490
7
8 xdg: add interface to search xdg data directories
9
10 Signed-off-by: Kenton Groombridge <me <AT> concord.sh>
11 Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>
12
13 policy/modules/system/xdg.if | 18 ++++++++++++++++++
14 1 file changed, 18 insertions(+)
15
16 diff --git a/policy/modules/system/xdg.if b/policy/modules/system/xdg.if
17 index b7620384..6e1cd836 100644
18 --- a/policy/modules/system/xdg.if
19 +++ b/policy/modules/system/xdg.if
20 @@ -635,6 +635,24 @@ interface(`xdg_relabel_all_config',`
21 userdom_search_user_home_dirs($1)
22 ')
23
24 +########################################
25 +## <summary>
26 +## Search through the xdg data home directories
27 +## </summary>
28 +## <param name="domain">
29 +## <summary>
30 +## Domain allowed access
31 +## </summary>
32 +## </param>
33 +#
34 +interface(`xdg_search_data_dirs',`
35 + gen_require(`
36 + type xdg_data_t;
37 + ')
38 +
39 + allow $1 xdg_data_t:dir search_dir_perms;
40 +')
41 +
42 ########################################
43 ## <summary>
44 ## Watch the xdg data home directories