Re: pyzor/spam changes in policy

[Daniel J Walsh <dwalsh@redhat.com>]

Christopher J. PeBenito wrote:
> On Thu, 2007-03-08 at 09:02 -0500, Daniel J Walsh wrote:
>   
>> Christopher J. PeBenito wrote:
>>     
>>> On Mon, 2007-02-26 at 12:35 -0500, dwalsh@localhost.localdomain wrote:
>>>       
>>>> @@ -139,6 +148,7 @@
>>>>  
>>>>  	tunable_policy(`spamd_enable_home_dirs',`
>>>>  		userdom_home_filetrans_generic_user_home_dir(spamd_t)
>>>> +		userdom_manage_generic_user_home_dirs(spamd_t)
>>>>  		userdom_manage_generic_user_home_content_dirs(spamd_t)
>>>>  		userdom_manage_generic_user_home_content_files(spamd_t)
>>>>  		userdom_manage_generic_user_home_content_symlinks(spamd_t)
>>>>     
>>>>         
>>> I don't understand why spamd_t would be creating new top level home
>>> diretories, for example the /home/myuser dir.
>>>
>>>   
>>>       
>> https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=203290
>>     
>
> I think this would be the correct fix:
>
> @@ -146,10 +146,10 @@
>         files_dontaudit_read_root_files(spamd_t)
>  
>         tunable_policy(`spamd_enable_home_dirs',`
> -               userdom_home_filetrans_generic_user_home_dir(spamd_t)
>                 userdom_manage_generic_user_home_content_dirs(spamd_t)
>                 userdom_manage_generic_user_home_content_files(spamd_t)
>                 userdom_manage_generic_user_home_content_symlinks(spamd_t)
> +               userdom_generic_user_home_dir_filetrans_generic_user_home_content(spamd_t,dir)
>         ')
>  ')
>  
> since it is creating the ~/.spamassassin dir the filetrans
> user_home_dir_t -> user_home_t was missing.  The filetrans that was in
> there did home_root_t -> user_home_dir_t.
>
>   

Thats ok with me.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.