Skip to contentSkip to conversation

Changes to the userdomain policy module

PATCH New Dominick Grift 2 participants 2 messages Dec 17, 2012 – Jan 3, 2013

lore
Share & tools
lore

Dominick Grift

author
#0 lore raw

PATCH 1/1 Changes to the userdomain policy module

Make sure various virt user home content gets created with a type transition and proper file contexts for common users

Signed-off-by Dominick Grift <[email protected]>
policy/modules/system/userdomain.if +8 -0
index 6d4424b..3c5dba7 100644
@@ -712,6 +712,14 @@
 	optional_policy(`
 		usernetctl_run($1_t, $1_r)
 	')
+
+	optional_policy(`
+		virt_home_filetrans_virt_home($1_t, dir, ".libvirt")
+		virt_home_filetrans_virt_home($1_t, dir, ".virtinst")
+		virt_home_filetrans_virt_content($1_t, dir, "isos")
+		virt_home_filetrans_svirt_home($1_t, dir, "qemu")
+		virt_home_filetrans_virt_home($1_t, dir, "VirtualMachines")	
+	')
 ')
 
 #######################################
#1 lore raw

PATCH 1/1 Changes to the userdomain policy module

Quoted 11 lines · Dominick Grift

Make sure various virt user home content gets created with a type transition and proper file contexts for common users

Signed-off-by Dominick Grift <[email protected]>
policy/modules/system/userdomain.if +0 -0
index 6d4424b..3c5dba7 100644
@@ -712,6 +712,14 @@
 	optional_policy(`

policy/modules/system/userdomain.if line 722

Quoted 10 lines
policy/modules/system/userdomain.if +8 -0
 		usernetctl_run($1_t, $1_r)
 	')
+
+	optional_policy(`
+		virt_home_filetrans_virt_home($1_t, dir, ".libvirt")
+		virt_home_filetrans_virt_home($1_t, dir, ".virtinst")
+		virt_home_filetrans_virt_content($1_t, dir, "isos")
+		virt_home_filetrans_svirt_home($1_t, dir, "qemu")
+		virt_home_filetrans_virt_home($1_t, dir, "VirtualMachines")	
+	')

Merged.

Signature · 3 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com