Skip to content

Introduce XDG type definitions

Sven Vermeulen selinux-refpolicy 1 version New

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest4 patches 0 repliesNew

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/4Introduce xdg typespolicy/modules/system/xdg.fc policy/modules/system/xdg.if policy/modules/system/xdg.te+190 -01 reply
2/4Allow users to manage their xdg_* locationspolicy/modules/system/userdomain.if+3 -00 replies
3/4Allow the dbusd_t domains to read xdg datapolicy/modules/services/dbus.if+2 -00 replies
4/4Allow mozilla to read xdg datapolicy/modules/apps/mozilla.te+2 -00 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [refpolicy] [PATCH/RFC 0/4] Introduce XDG type definitions

This patchset introduces a new module called "xdg".

The purpose of this module is to support the XDG locations as mentioned in the XDG Base Directory Specification [1] by introducing three types (xdg_data_home_t, xdg_config_home_t and xdg_cache_home_t) with the related interfaces for dealing with those types.

Within the patch, there are also a few users identified. Most of the "real" users will come with a more thorough "let me run all applications that have access to the user home files" investigation, because the XDG locations are previously just user_home_t types.

However, before doing that investigation, I'm first presenting the module and its interfaces for feedback gathering.

[1] http://standards.freedesktop.org/basedir-spec/basedir-spec-latest.html

Wkr,
Sven Vermeulen