From: dominick.grift@gmail.com (grift)
To: refpolicy@oss.tresys.com
Subject: [refpolicy] [PATCH 3/3] Implement X Desktop Group
Date: Thu, 29 Nov 2012 15:16:32 +0100 [thread overview]
Message-ID: <1354198592.20999.5.camel@localhost> (raw)
In-Reply-To: <50B76876.3010305@tresys.com>
On Thu, 2012-11-29 at 08:51 -0500, Christopher J. PeBenito wrote:
> On 11/29/12 08:09, grift wrote:
> > Are we ready to make a decision yet with regard to the two outstanding
> > issues?
> >
> > - best type names? (my preference user_data_home_t, user_config_home_t,
> > user_cache_home_t)
>
> replace user with xdg, e.g. xdg_config_home_t.
>
> > - should be label ~/.local/share with the xdg data home type or ~/.local
> > ( my preference ~/.local/share)
> >
> > But i will go with whatever in the end
>
> Here's another option to consider:
>
> $HOME/.local -d gen_context(system_u:object_r:xdg_local_home_t,s0)
> $HOME/.local/share(/.*)? gen_context(system_u:object_r:xdg_data_home_t,s0)
>
> and then treat xdg_local_home_t similar to user_home_dir_t and filetrans everything under it. Then the named filetrans for ~/.local/share will work right on top of any of the other random dirs that pop up under there.
I understand your reasoning but i am not confident about the type name
"xdg_local_home_t" and i am also not confident that this type should be
declared in the xserver policy module
how about we use local_home_t and declare it in the userdomain module?
> > On Mon, 2012-11-05 at 12:55 +0100, Dominick Grift wrote:
> >> Creates 3 type attributes for xdg cache (~/.cache), config (~/.config)
> >> and data (~/.local/share user home content and assigns to
> >> xserver_user_cache_home_content(), xserver_user_config_home_content()
> >> and xserver_user_data_home_content() respectively
> >>
> >> Creates 3 types for generic xdg user cache, config and data home
> >> content, assigns to them their respective type attributes and
> >> classifieds them user_home_content_type by calling xserver_user_cache,
> >> config, data_home_content
> >>
> >> Create the various basic interfaces that will be needed:
> >>
> >> 1. xserver_create_generic_user_cache, config, data, home_dirs:
> >> This will be used together with
> >> xserver_user_home_(content|dir)_filetrans_cache, config,
> >> data_home_content and allows the caller to create ~/.cache, ~/.config
> >> and ~/.local/share directories. Each XDG aware program needs to be
> >> able to create these.
> >>
> >> 2. xserver_read|manage_generic_user_cache, config, data_home_content:
> >> By default content is created with a generic type and these broad
> >> interfaces allow the caller to read of manage content with these
> >> generic types
> >>
> >> 3. xserver_user_cache, config, data_home_content_filetrans:
> >> Allows callers to create specified objects in these location with a
> >> private type
> >>
> >> Add file context specifications for ~/.cache(/.*)? (user_cache_home_t),
> >> ~/.config(/.*)? (user_config_home_t) and ~/.local/share(/.*)?
> >> (user_data_home_t)
> >>
> >> There is a little issue with user_data_home, this is content for
> >> ~/.local/share and as per xdg specification "share" is the user data
> >> root dir instead of ~/.local, that means that the type transition
> >> happens on user home content instead of user home dir. this makes it a
> >> bit more prone to error since all directories named share created by
> >> xserver_restricted_role callers in generic user home content
> >> directories will be created with user_data_home_t. We could consider
> >> using ~/.local instead
> >>
> >> Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
> >> ---
> >> policy/modules/services/xserver.fc | 4 +
> >> policy/modules/services/xserver.if | 533 +++++++++++++++++++++++++++++++++++++
> >> policy/modules/services/xserver.te | 14 +
> >> 3 files changed, 551 insertions(+)
> >>
> >> diff --git a/policy/modules/services/xserver.fc b/policy/modules/services/xserver.fc
> >> index 9393f65..e64ecb2 100644
> >> --- a/policy/modules/services/xserver.fc
> >> +++ b/policy/modules/services/xserver.fc
> >> @@ -1,6 +1,10 @@
> >> #
> >> # HOME_DIR
> >> #
> >> +
> >> +HOME_DIR/\.cache(/.*)? gen_context(system_u:object_r:user_cache_home_t,s0)
> >> +HOME_DIR/\.config(/.*)? gen_context(system_u:object_r:user_config_home_t,s0)
> >> +HOME_DIR/\.local/share(/.*)? gen_context(system_u:object_r:user_data_home_t,s0)
> >> HOME_DIR/\.fonts\.conf -- gen_context(system_u:object_r:user_fonts_config_t,s0)
> >> HOME_DIR/\.fonts(/.*)? gen_context(system_u:object_r:user_fonts_t,s0)
> >> HOME_DIR/\.fonts/auto(/.*)? gen_context(system_u:object_r:user_fonts_cache_t,s0)
> >> diff --git a/policy/modules/services/xserver.if b/policy/modules/services/xserver.if
> >> index 6bf0ecc..c4f7cb4 100644
> >> --- a/policy/modules/services/xserver.if
> >> +++ b/policy/modules/services/xserver.if
> >> @@ -22,6 +22,7 @@ interface(`xserver_restricted_role',`
> >> type user_fonts_t, user_fonts_cache_t, user_fonts_config_t;
> >> type iceauth_t, iceauth_exec_t, iceauth_home_t;
> >> type xauth_t, xauth_exec_t, xauth_home_t;
> >> + type user_cache_home_t, user_config_home_t, user_data_home_t;
> >> ')
> >>
> >> role $1 types { xserver_t xauth_t iceauth_t };
> >> @@ -34,6 +35,16 @@ interface(`xserver_restricted_role',`
> >>
> >> allow xserver_t $2:shm rw_shm_perms;
> >>
> >> + allow $2 { user_cache_home_t user_config_home_t user_data_home_t }:dir { manage_dir_perms relabel_dir_perms };
> >> + allow $2 { user_cache_home_t user_config_home_t user_data_home_t }:fifo_file { manage_fifo_file_perms relabel_fifo_file_perms };
> >> + allow $2 { user_cache_home_t user_config_home_t user_data_home_t }:file { manage_file_perms relabel_file_perms };
> >> + allow $2 { user_cache_home_t user_config_home_t user_data_home_t }:lnk_file { manage_lnk_file_perms relabel_lnk_file_perms };
> >> + allow $2 { user_cache_home_t user_config_home_t user_data_home_t }:sock_file { manage_sock_file_perms relabel_sock_file_perms };
> >> +
> >> + userdom_user_home_dir_filetrans($2, user_cache_home_t, dir, ".cache")
> >> + userdom_user_home_dir_filetrans($2, user_config_home_t, dir, ".config")
> >> + userdom_user_home_content_filetrans($2, user_data_home_t, dir, "share")
> >> +
> >> allow $2 user_fonts_t:dir list_dir_perms;
> >> allow $2 user_fonts_t:file read_file_perms;
> >>
> >> @@ -531,6 +542,72 @@ interface(`xserver_use_user_fonts',`
> >>
> >> ########################################
> >> ## <summary>
> >> +## Make the specified type usable in a
> >> +## user cache home directory.
> >> +## </summary>
> >> +## <param name="type">
> >> +## <summary>
> >> +## Type to be used as a file in the
> >> +## user cache home directory.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_user_cache_home_content',`
> >> + gen_require(`
> >> + attribute xserver_user_cache_home_content_type;
> >> + ')
> >> +
> >> + typeattribute $1 xserver_user_cache_home_content_type;
> >> +
> >> + userdom_user_home_content($1)
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Make the specified type usable in a
> >> +## user config home directory.
> >> +## </summary>
> >> +## <param name="type">
> >> +## <summary>
> >> +## Type to be used as a file in the
> >> +## user config home directory.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_user_config_home_content',`
> >> + gen_require(`
> >> + attribute xserver_user_config_home_content_type;
> >> + ')
> >> +
> >> + typeattribute $1 xserver_user_config_home_content_type;
> >> +
> >> + userdom_user_home_content($1)
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Make the specified type usable in a
> >> +## user data home directory.
> >> +## </summary>
> >> +## <param name="type">
> >> +## <summary>
> >> +## Type to be used as a file in the
> >> +## user data home directory.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_user_data_home_content',`
> >> + gen_require(`
> >> + attribute xserver_user_data_home_content_type;
> >> + ')
> >> +
> >> + typeattribute $1 xserver_user_data_home_content_type;
> >> +
> >> + userdom_user_home_content($1)
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> ## Transition to the Xauthority domain.
> >> ## </summary>
> >> ## <param name="domain">
> >> @@ -1272,6 +1349,462 @@ interface(`xserver_manage_core_devices',`
> >>
> >> ########################################
> >> ## <summary>
> >> +## Create generic user cache home
> >> +## content directories.
> >> +## </summary>
> >> +## <param name="domain">
> >> +## <summary>
> >> +## Domain allowed access.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_create_generic_user_cache_home_content_dirs',`
> >> + gen_require(`
> >> + type user_cache_home_t;
> >> + ')
> >> +
> >> + allow $1 user_cache_home_t:dir create_dir_perms;
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Read generic user cache home content.
> >> +## </summary>
> >> +## <param name="domain">
> >> +## <summary>
> >> +## Domain allowed access.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_read_generic_user_cache_home_content',`
> >> + gen_require(`
> >> + type user_cache_home_t;
> >> + ')
> >> +
> >> + userdom_search_user_home_dirs($1)
> >> + allow $1 user_cache_home_t:dir list_dir_perms;
> >> + allow $1 user_cache_home_t:file read_file_perms;
> >> + allow $1 user_cache_home_t:fifo_file read_fifo_file_perms;
> >> + allow $1 user_cache_home_t:lnk_file read_lnk_file_perms;
> >> + allow $1 user_cache_home_t:sock_file read_sock_file_perms;
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Create, read, write, and delete
> >> +## generic user cache home content.
> >> +## </summary>
> >> +## <param name="domain">
> >> +## <summary>
> >> +## Domain allowed access.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_manage_generic_user_cache_home_content',`
> >> + gen_require(`
> >> + type user_cache_home_t;
> >> + ')
> >> +
> >> + userdom_search_user_home_dirs($1)
> >> + allow $1 user_cache_home_t:dir manage_dir_perms;
> >> + allow $1 user_cache_home_t:file manage_file_perms;
> >> + allow $1 user_cache_home_t:fifo_file manage_fifo_file_perms;
> >> + allow $1 user_cache_home_t:lnk_file manage_lnk_file_perms;
> >> + allow $1 user_cache_home_t:sock_file manage_sock_file_perms;
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Search generic user cache home
> >> +## content directories.
> >> +## </summary>
> >> +## <param name="domain">
> >> +## <summary>
> >> +## Domain allowed access.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_search_generic_user_cache_home_content',`
> >> + gen_require(`
> >> + type user_cache_home_t;
> >> + ')
> >> +
> >> + userdom_search_user_home_dirs($1)
> >> + allow $1 user_cache_home_t:dir search_dir_perms;
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Create specified objects in generic
> >> +## user cache home content directories
> >> +## with a private type.
> >> +## </summary>
> >> +## <param name="domain">
> >> +## <summary>
> >> +## Domain allowed access.
> >> +## </summary>
> >> +## </param>
> >> +## <param name="private_type">
> >> +## <summary>
> >> +## Private file type.
> >> +## </summary>
> >> +## </param>
> >> +## <param name="object_class">
> >> +## <summary>
> >> +## Class of the object being created.
> >> +## </summary>
> >> +## </param>
> >> +## <param name="name" optional="true">
> >> +## <summary>
> >> +## The name of the object being created.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_user_cache_home_content_filetrans',`
> >> + gen_require(`
> >> + type user_cache_home_t;
> >> + ')
> >> +
> >> + userdom_search_user_home_dirs($1)
> >> + filetrans_pattern($1, user_cache_home_t, $2, $3, $4)
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Create specified objects in user home
> >> +## directories with the generic user
> >> +## cache home content type.
> >> +## </summary>
> >> +## <param name="domain">
> >> +## <summary>
> >> +## Domain allowed access.
> >> +## </summary>
> >> +## </param>
> >> +## <param name="object_class">
> >> +## <summary>
> >> +## Class of the object being created.
> >> +## </summary>
> >> +## </param>
> >> +## <param name="name" optional="true">
> >> +## <summary>
> >> +## The name of the object being created.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_user_home_dir_filetrans_user_cache_home_content',`
> >> + gen_require(`
> >> + type user_cache_home_t;
> >> + ')
> >> +
> >> + userdom_user_home_dir_filetrans($1, user_cache_home_t, $2, $3)
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Create generic user config home
> >> +## content directories.
> >> +## </summary>
> >> +## <param name="domain">
> >> +## <summary>
> >> +## Domain allowed access.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_create_generic_user_config_home_content_dirs',`
> >> + gen_require(`
> >> + type user_config_home_t;
> >> + ')
> >> +
> >> + allow $1 user_config_home_t:dir create_dir_perms;
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Read generic user config home content.
> >> +## </summary>
> >> +## <param name="domain">
> >> +## <summary>
> >> +## Domain allowed access.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_read_generic_user_config_home_content',`
> >> + gen_require(`
> >> + type user_config_home_t;
> >> + ')
> >> +
> >> + userdom_search_user_home_dirs($1)
> >> + allow $1 user_config_home_t:dir list_dir_perms;
> >> + allow $1 user_config_home_t:file read_file_perms;
> >> + allow $1 user_config_home_t:fifo_file read_fifo_file_perms;
> >> + allow $1 user_config_home_t:lnk_file read_lnk_file_perms;
> >> + allow $1 user_config_home_t:sock_file read_sock_file_perms;
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Create, read, write, and delete
> >> +## generic user config home content.
> >> +## </summary>
> >> +## <param name="domain">
> >> +## <summary>
> >> +## Domain allowed access.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_manage_generic_user_config_home_content',`
> >> + gen_require(`
> >> + type user_config_home_t;
> >> + ')
> >> +
> >> + userdom_search_user_home_dirs($1)
> >> + allow $1 user_config_home_t:dir manage_dir_perms;
> >> + allow $1 user_config_home_t:file manage_file_perms;
> >> + allow $1 user_config_home_t:fifo_file manage_fifo_file_perms;
> >> + allow $1 user_config_home_t:lnk_file manage_lnk_file_perms;
> >> + allow $1 user_config_home_t:sock_file manage_sock_file_perms;
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Search generic user config home
> >> +## content directories.
> >> +## </summary>
> >> +## <param name="domain">
> >> +## <summary>
> >> +## Domain allowed access.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_search_generic_user_config_home_content',`
> >> + gen_require(`
> >> + type user_config_home_t;
> >> + ')
> >> +
> >> + userdom_search_user_home_dirs($1)
> >> + allow $1 user_config_home_t:dir search_dir_perms;
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Create specified objects in generic
> >> +## user config home content directories
> >> +## with a private type.
> >> +## </summary>
> >> +## <param name="domain">
> >> +## <summary>
> >> +## Domain allowed access.
> >> +## </summary>
> >> +## </param>
> >> +## <param name="private_type">
> >> +## <summary>
> >> +## Private file type.
> >> +## </summary>
> >> +## </param>
> >> +## <param name="object_class">
> >> +## <summary>
> >> +## Class of the object being created.
> >> +## </summary>
> >> +## </param>
> >> +## <param name="name" optional="true">
> >> +## <summary>
> >> +## The name of the object being created.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_user_config_home_content_filetrans',`
> >> + gen_require(`
> >> + type user_config_home_t;
> >> + ')
> >> +
> >> + userdom_search_user_home_dirs($1)
> >> + filetrans_pattern($1, user_config_home_t, $2, $3, $4)
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Create specified objects in user home
> >> +## directories with the generic user
> >> +## config home content type.
> >> +## </summary>
> >> +## <param name="domain">
> >> +## <summary>
> >> +## Domain allowed access.
> >> +## </summary>
> >> +## </param>
> >> +## <param name="object_class">
> >> +## <summary>
> >> +## Class of the object being created.
> >> +## </summary>
> >> +## </param>
> >> +## <param name="name" optional="true">
> >> +## <summary>
> >> +## The name of the object being created.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_user_home_dir_filetrans_user_config_home_content',`
> >> + gen_require(`
> >> + type user_config_home_t;
> >> + ')
> >> +
> >> + userdom_user_home_dir_filetrans($1, user_config_home_t, $2, $3)
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Create generic user data home
> >> +## content directories.
> >> +## </summary>
> >> +## <param name="domain">
> >> +## <summary>
> >> +## Domain allowed access.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_create_generic_user_data_home_content_dirs',`
> >> + gen_require(`
> >> + type user_data_home_t;
> >> + ')
> >> +
> >> + allow $1 user_data_home_t:dir create_dir_perms;
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Read generic user data home content.
> >> +## </summary>
> >> +## <param name="domain">
> >> +## <summary>
> >> +## Domain allowed access.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_read_generic_user_data_home_content',`
> >> + gen_require(`
> >> + type user_data_home_t;
> >> + ')
> >> +
> >> + userdom_search_user_home_content($1)
> >> + allow $1 user_data_home_t:dir list_dir_perms;
> >> + allow $1 user_data_home_t:file read_file_perms;
> >> + allow $1 user_data_home_t:fifo_file read_fifo_file_perms;
> >> + allow $1 user_data_home_t:lnk_file read_lnk_file_perms;
> >> + allow $1 user_data_home_t:sock_file read_sock_file_perms;
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Create, read, write, and delete
> >> +## generic user data home content.
> >> +## </summary>
> >> +## <param name="domain">
> >> +## <summary>
> >> +## Domain allowed access.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_manage_generic_user_data_home_content',`
> >> + gen_require(`
> >> + type user_data_home_t;
> >> + ')
> >> +
> >> + userdom_search_user_home_content($1)
> >> + allow $1 user_data_home_t:dir manage_dir_perms;
> >> + allow $1 user_data_home_t:file manage_file_perms;
> >> + allow $1 user_data_home_t:fifo_file manage_fifo_file_perms;
> >> + allow $1 user_data_home_t:lnk_file manage_lnk_file_perms;
> >> + allow $1 user_data_home_t:sock_file manage_sock_file_perms;
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Search generic user data home
> >> +## content directories.
> >> +## </summary>
> >> +## <param name="domain">
> >> +## <summary>
> >> +## Domain allowed access.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_search_generic_user_data_home_content',`
> >> + gen_require(`
> >> + type user_data_home_t;
> >> + ')
> >> +
> >> + userdom_search_user_home_content($1)
> >> + allow $1 user_data_home_t:dir search_dir_perms;
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Create specified objects in generic
> >> +## user data home content directories
> >> +## with a private type.
> >> +## </summary>
> >> +## <param name="domain">
> >> +## <summary>
> >> +## Domain allowed access.
> >> +## </summary>
> >> +## </param>
> >> +## <param name="private_type">
> >> +## <summary>
> >> +## Private file type.
> >> +## </summary>
> >> +## </param>
> >> +## <param name="object_class">
> >> +## <summary>
> >> +## Class of the object being created.
> >> +## </summary>
> >> +## </param>
> >> +## <param name="name" optional="true">
> >> +## <summary>
> >> +## The name of the object being created.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_user_data_home_content_filetrans',`
> >> + gen_require(`
> >> + type user_data_home_t;
> >> + ')
> >> +
> >> + userdom_search_user_home_content($1)
> >> + filetrans_pattern($1, user_data_home_t, $2, $3, $4)
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> +## Create specified objects in user home
> >> +## content directories with the generic
> >> +## user data home content type.
> >> +## </summary>
> >> +## <param name="domain">
> >> +## <summary>
> >> +## Domain allowed access.
> >> +## </summary>
> >> +## </param>
> >> +## <param name="object_class">
> >> +## <summary>
> >> +## Class of the object being created.
> >> +## </summary>
> >> +## </param>
> >> +## <param name="name" optional="true">
> >> +## <summary>
> >> +## The name of the object being created.
> >> +## </summary>
> >> +## </param>
> >> +#
> >> +interface(`xserver_user_home_content_filetrans_user_data_home_content',`
> >> + gen_require(`
> >> + type user_data_home_t;
> >> + ')
> >> +
> >> + userdom_user_home_content_filetrans($1, user_data_home_t, $2, $3)
> >> +')
> >> +
> >> +########################################
> >> +## <summary>
> >> ## Interface to provide X object permissions on a given X server to
> >> ## an X client domain. Gives the domain complete control over the
> >> ## display.
> >> diff --git a/policy/modules/services/xserver.te b/policy/modules/services/xserver.te
> >> index 9bc86a0..a42f9bc 100644
> >> --- a/policy/modules/services/xserver.te
> >> +++ b/policy/modules/services/xserver.te
> >> @@ -49,6 +49,11 @@ gen_tunable(xserver_object_manager, false)
> >>
> >> attribute x_domain;
> >>
> >> +# X Desktop Group
> >> +attribute xserver_user_cache_home_content_type;
> >> +attribute xserver_user_config_home_content_type;
> >> +attribute xserver_user_data_home_content_type;
> >> +
> >> # X Events
> >> attribute xevent_type;
> >> attribute input_xevent_type;
> >> @@ -106,6 +111,15 @@ type remote_t;
> >> xserver_object_types_template(remote)
> >> xserver_common_x_domain_template(remote, remote_t)
> >>
> >> +type user_cache_home_t;
> >> +xserver_user_cache_home_content(user_cache_home_t)
> >> +
> >> +type user_config_home_t;
> >> +xserver_user_config_home_content(user_config_home_t)
> >> +
> >> +type user_data_home_t;
> >> +xserver_user_data_home_content(user_data_home_t)
> >> +
> >> type user_fonts_t;
> >> typealias user_fonts_t alias { staff_fonts_t sysadm_fonts_t };
> >> typealias user_fonts_t alias { auditadm_fonts_t secadm_fonts_t };
> >
> >
> > _______________________________________________
> > refpolicy mailing list
> > refpolicy at oss.tresys.com
> > http://oss.tresys.com/mailman/listinfo/refpolicy
> >
>
>
next prev parent reply other threads:[~2012-11-29 14:16 UTC|newest]
Thread overview: 18+ messages / expand[flat|nested] mbox.gz Atom feed top
2012-11-05 11:55 [refpolicy] [PATCH 0/3] Implement X Desktop Group and relevant dependencies Dominick Grift
2012-11-05 11:55 ` [refpolicy] [PATCH 1/3] Create a attribute user_home_content_type and assign it to all types that are classified userdom_user_home_content() Dominick Grift
2012-11-05 11:55 ` [refpolicy] [PATCH 2/3] These two attribute are unused Dominick Grift
2012-11-05 11:55 ` [refpolicy] [PATCH 3/3] Implement X Desktop Group Dominick Grift
2012-11-26 16:35 ` Christopher J. PeBenito
[not found] ` <1353950589.10744.5.camel@x220.mydomain.internal>
[not found] ` <50B4BDE4.4080703@tresys.com>
2012-11-27 13:27 ` Dominick Grift
2012-11-27 15:31 ` Sven Vermeulen
2012-11-29 13:09 ` grift
2012-11-29 13:51 ` Christopher J. PeBenito
2012-11-29 14:16 ` grift [this message]
2012-11-29 14:48 ` grift
2012-11-30 14:35 ` Christopher J. PeBenito
2012-11-30 17:01 ` grift
2012-11-30 20:06 ` Daniel J Walsh
2012-12-07 4:53 ` Christopher J. PeBenito
2012-12-11 12:35 ` grift
2012-12-11 14:31 ` Christopher J. PeBenito
2012-12-11 15:00 ` grift
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1354198592.20999.5.camel@localhost \
--to=dominick.grift@gmail.com \
--cc=refpolicy@oss.tresys.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.