* gpg needs to be able to create its keys dir
@ 2007-03-08 15:46 Daniel J Walsh
2007-03-19 18:07 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Daniel J Walsh @ 2007-03-08 15:46 UTC (permalink / raw)
To: Christopher J. PeBenito, SE Linux
[-- Attachment #1: Type: text/plain, Size: 1 bytes --]
[-- Attachment #2: nsaserefpolicy_policy_modules_apps_gpg.if --]
[-- Type: text/plain, Size: 494 bytes --]
--- nsaserefpolicy/policy/modules/apps/gpg.if 2007-01-02 12:57:22.000000000 -0500
+++ serefpolicy-2.5.8/policy/modules/apps/gpg.if 2007-03-08 08:42:36.000000000 -0500
@@ -89,6 +89,7 @@
manage_files_pattern($1_gpg_t,$1_gpg_secret_t,$1_gpg_secret_t)
manage_lnk_files_pattern($1_gpg_t,$1_gpg_secret_t,$1_gpg_secret_t)
+ userdom_user_home_dir_filetrans($1, $1_gpg_t, $1_gpg_secret_t, dir)
# transition from the userdomain to the derived domain
domtrans_pattern($2,gpg_exec_t,$1_gpg_t)
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: gpg needs to be able to create its keys dir
2007-03-08 15:46 gpg needs to be able to create its keys dir Daniel J Walsh
@ 2007-03-19 18:07 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2007-03-19 18:07 UTC (permalink / raw)
To: Daniel J Walsh; +Cc: SE Linux
On Thu, 2007-03-08 at 10:46 -0500, Daniel J Walsh wrote:
> plain text document attachment
> (nsaserefpolicy_policy_modules_apps_gpg.if)
> --- nsaserefpolicy/policy/modules/apps/gpg.if 2007-01-02 12:57:22.000000000 -0500
> +++ serefpolicy-2.5.8/policy/modules/apps/gpg.if 2007-03-08 08:42:36.000000000 -0500
> @@ -89,6 +89,7 @@
>
> manage_files_pattern($1_gpg_t,$1_gpg_secret_t,$1_gpg_secret_t)
> manage_lnk_files_pattern($1_gpg_t,$1_gpg_secret_t,$1_gpg_secret_t)
> + userdom_user_home_dir_filetrans($1, $1_gpg_t, $1_gpg_secret_t, dir)
>
> # transition from the userdomain to the derived domain
> domtrans_pattern($2,gpg_exec_t,$1_gpg_t)
Merged. Also added perms so gpg can actually create the dir.
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2007-03-19 18:07 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-03-08 15:46 gpg needs to be able to create its keys dir Daniel J Walsh
2007-03-19 18:07 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.