[refpolicy] [PATCH 1/1] Remove pulseaudio filename_trans conflict

[refpolicy] [PATCH 1/1] Remove pulseaudio filename_trans conflict

[Sven Vermeulen]

The pulseaudio_role() interface currently defines explicit filename transitions
for three files/directories. However, these are already in effect as the domain
is assigned the pulseaudio_client attribute through the following:

pulseaudio_role()
-> pulseaudio_run
   -> pulseaudio_domtrans
      -> typeattribute $1 pulseaudio_client

The pulseaudio_client has these file name transitions already (cfr
pulseaudio.te).

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
---
 pulseaudio.if | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/pulseaudio.if b/pulseaudio.if
index fa3dc8e..45843b5 100644
--- a/pulseaudio.if
+++ b/pulseaudio.if
@@ -31,10 +31,6 @@ interface(`pulseaudio_role',`
 	allow $2 pulseaudio_home_t:file { manage_file_perms relabel_file_perms };
 	allow $2 pulseaudio_home_t:lnk_file { manage_lnk_file_perms relabel_lnk_file_perms };
 
-	userdom_user_home_dir_filetrans($2, pulseaudio_home_t, dir, ".pulse")
-	userdom_user_home_dir_filetrans($2, pulseaudio_home_t, file, ".esd_auth")
-	userdom_user_home_dir_filetrans($2, pulseaudio_home_t, file, ".pulse-cookie")
-
 	allow $2 { pulseaudio_tmpfs_t pulseaudio_tmpfsfile }:dir { manage_dir_perms relabel_dir_perms };
 	allow $2 { pulseaudio_tmpfs_t pulseaudio_tmpfsfile }:file { manage_file_perms relabel_file_perms };
 
-- 
1.8.1.5

[refpolicy] [PATCH 1/1] Remove pulseaudio filename_trans conflict

[Christopher J. PeBenito]

On 03/20/13 04:53, Sven Vermeulen wrote:
> The pulseaudio_role() interface currently defines explicit filename transitions
> for three files/directories. However, these are already in effect as the domain
> is assigned the pulseaudio_client attribute through the following:
> 
> pulseaudio_role()
> -> pulseaudio_run
>    -> pulseaudio_domtrans
>       -> typeattribute $1 pulseaudio_client
> 
> The pulseaudio_client has these file name transitions already (cfr
> pulseaudio.te).

Merged.


> Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
> ---
>  pulseaudio.if | 4 ----
>  1 file changed, 4 deletions(-)
> 
> diff --git a/pulseaudio.if b/pulseaudio.if
> index fa3dc8e..45843b5 100644
> --- a/pulseaudio.if
> +++ b/pulseaudio.if
> @@ -31,10 +31,6 @@ interface(`pulseaudio_role',`
>  	allow $2 pulseaudio_home_t:file { manage_file_perms relabel_file_perms };
>  	allow $2 pulseaudio_home_t:lnk_file { manage_lnk_file_perms relabel_lnk_file_perms };
>  
> -	userdom_user_home_dir_filetrans($2, pulseaudio_home_t, dir, ".pulse")
> -	userdom_user_home_dir_filetrans($2, pulseaudio_home_t, file, ".esd_auth")
> -	userdom_user_home_dir_filetrans($2, pulseaudio_home_t, file, ".pulse-cookie")
> -
>  	allow $2 { pulseaudio_tmpfs_t pulseaudio_tmpfsfile }:dir { manage_dir_perms relabel_dir_perms };
>  	allow $2 { pulseaudio_tmpfs_t pulseaudio_tmpfsfile }:file { manage_file_perms relabel_file_perms };
>  
> 


-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com