* .fonts-cache being created as user_home_dir_t
@ 2004-10-05 9:10 Luke Kenneth Casson Leighton
2004-10-07 2:50 ` Russell Coker
0 siblings, 1 reply; 6+ messages in thread
From: Luke Kenneth Casson Leighton @ 2004-10-05 9:10 UTC (permalink / raw)
To: SE-Linux
it looks like a file_auto_trans() is missing somewhere: i find
that ~/.fonts.cache-1 is set to type user_home_dir_t.
l.
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: .fonts-cache being created as user_home_dir_t
2004-10-05 9:10 .fonts-cache being created as user_home_dir_t Luke Kenneth Casson Leighton
@ 2004-10-07 2:50 ` Russell Coker
2004-10-08 10:04 ` Luke Kenneth Casson Leighton
0 siblings, 1 reply; 6+ messages in thread
From: Russell Coker @ 2004-10-07 2:50 UTC (permalink / raw)
To: Luke Kenneth Casson Leighton; +Cc: SE-Linux
On Tue, 5 Oct 2004 19:10, Luke Kenneth Casson Leighton <lkcl@lkcl.net> wrote:
> it looks like a file_auto_trans() is missing somewhere: i find
> that ~/.fonts.cache-1 is set to type user_home_dir_t.
Is that being created by kdm? Is the machine in permissive mode at the time
the file is created?
--
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: .fonts-cache being created as user_home_dir_t
2004-10-07 2:50 ` Russell Coker
@ 2004-10-08 10:04 ` Luke Kenneth Casson Leighton
2004-10-08 10:00 ` Russell Coker
` (2 more replies)
0 siblings, 3 replies; 6+ messages in thread
From: Luke Kenneth Casson Leighton @ 2004-10-08 10:04 UTC (permalink / raw)
To: Russell Coker; +Cc: SE-Linux
On Thu, Oct 07, 2004 at 12:50:14PM +1000, Russell Coker wrote:
> On Tue, 5 Oct 2004 19:10, Luke Kenneth Casson Leighton <lkcl@lkcl.net> wrote:
> > it looks like a file_auto_trans() is missing somewhere: i find
> > that ~/.fonts.cache-1 is set to type user_home_dir_t.
>
> Is that being created by kdm?
i couldn't entirely say: let me see if i can find out...
a search through all kdebase *.cpp,h only shows up
something in kcontrol kio handler. so that didn't work.
> Is the machine in permissive mode at the time
> the file is created?
no.
--
--
Truth, honesty and respect are rare commodities that all spring from
the same well: Love. If you love yourself and everyone and everything
around you, funnily and coincidentally enough, life gets a lot better.
--
<a href="http://lkcl.net"> lkcl.net </a> <br />
<a href="mailto:lkcl@lkcl.net"> lkcl@lkcl.net </a> <br />
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 6+ messages in thread* Re: .fonts-cache being created as user_home_dir_t
2004-10-08 10:04 ` Luke Kenneth Casson Leighton
@ 2004-10-08 10:00 ` Russell Coker
2004-10-08 13:31 ` Colin Walters
2004-10-08 13:38 ` Erich Schubert
2 siblings, 0 replies; 6+ messages in thread
From: Russell Coker @ 2004-10-08 10:00 UTC (permalink / raw)
To: Luke Kenneth Casson Leighton; +Cc: SE-Linux
On Fri, 8 Oct 2004 20:04, Luke Kenneth Casson Leighton <lkcl@lkcl.net> wrote:
> > > it looks like a file_auto_trans() is missing somewhere: i find
> > > that ~/.fonts.cache-1 is set to type user_home_dir_t.
> >
> > Is that being created by kdm?
>
> i couldn't entirely say: let me see if i can find out...
> a search through all kdebase *.cpp,h only shows up
> something in kcontrol kio handler. so that didn't work.
Put in:
auditallow domain user_home_dir_t:file *;
--
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: .fonts-cache being created as user_home_dir_t
2004-10-08 10:04 ` Luke Kenneth Casson Leighton
2004-10-08 10:00 ` Russell Coker
@ 2004-10-08 13:31 ` Colin Walters
2004-10-08 13:38 ` Erich Schubert
2 siblings, 0 replies; 6+ messages in thread
From: Colin Walters @ 2004-10-08 13:31 UTC (permalink / raw)
To: Luke Kenneth Casson Leighton; +Cc: Russell Coker, SE-Linux
On Fri, 2004-10-08 at 11:04 +0100, Luke Kenneth Casson Leighton wrote:
> On Thu, Oct 07, 2004 at 12:50:14PM +1000, Russell Coker wrote:
> > On Tue, 5 Oct 2004 19:10, Luke Kenneth Casson Leighton <lkcl@lkcl.net> wrote:
> > > it looks like a file_auto_trans() is missing somewhere: i find
> > > that ~/.fonts.cache-1 is set to type user_home_dir_t.
> >
> > Is that being created by kdm?
>
> i couldn't entirely say: let me see if i can find out...
> a search through all kdebase *.cpp,h only shows up
> something in kcontrol kio handler. so that didn't work.
The file is created by the fontconfig libraries. Since Qt uses
fontconfig, any process that uses Qt could potentially create that file.
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: .fonts-cache being created as user_home_dir_t
2004-10-08 10:04 ` Luke Kenneth Casson Leighton
2004-10-08 10:00 ` Russell Coker
2004-10-08 13:31 ` Colin Walters
@ 2004-10-08 13:38 ` Erich Schubert
2 siblings, 0 replies; 6+ messages in thread
From: Erich Schubert @ 2004-10-08 13:38 UTC (permalink / raw)
To: Luke Kenneth Casson Leighton; +Cc: Russell Coker, SE-Linux
Hi,
> i couldn't entirely say: let me see if i can find out...
> a search through all kdebase *.cpp,h only shows up
> something in kcontrol kio handler. so that didn't work.
.fonts-cache is probably created by the fontconfig libraries, so any app
that does link this library could be "causing" this.
I guess the cleanes SELinux approach would be to split this out of the
fontconfig libraries into an own application... ;-)
Greetings,
Erich Schubert
--
erich@(vitavonni.de|debian.org) -- GPG Key ID: 4B3A135C (o_
Which is worse: ignorance or apathy? Who knows? Who cares? //\
Es lohnt sich nicht, die Augen aufzumachen, V_/_
wenn der Kopf im Sand steckt.
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2004-10-08 13:39 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-10-05 9:10 .fonts-cache being created as user_home_dir_t Luke Kenneth Casson Leighton
2004-10-07 2:50 ` Russell Coker
2004-10-08 10:04 ` Luke Kenneth Casson Leighton
2004-10-08 10:00 ` Russell Coker
2004-10-08 13:31 ` Colin Walters
2004-10-08 13:38 ` Erich Schubert
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.