From 2d743657f4706b7deffae6e9389b73b549f5c442 Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Mon, 8 Feb 2010 11:43:44 -0500 Subject: [PATCH] Userdomain patch from Stefan Schulze Frielinghaus. --- policy/modules/system/userdomain.if | 18 ++++++++++++++++++ policy/modules/system/userdomain.te | 2 +- 2 files changed, 19 insertions(+), 1 deletion(-) diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if index d6198c59..38684a9c 100644 --- a/policy/modules/system/userdomain.if +++ b/policy/modules/system/userdomain.if @@ -1575,6 +1575,24 @@ interface(`userdom_dontaudit_search_user_home_content',` dontaudit $1 user_home_t:dir search_dir_perms; ') +######################################## +## +## List contents of users home directory. +## +## +## +## Domain allowed access. +## +## +# +interface(`userdom_list_user_home_content',` + gen_require(` + type user_home_t; + ') + + allow $1 user_home_t:dir list_dir_perms; +') + ######################################## ## ## Create, read, write, and delete directories diff --git a/policy/modules/system/userdomain.te b/policy/modules/system/userdomain.te index c01f7aed..b7ff4820 100644 --- a/policy/modules/system/userdomain.te +++ b/policy/modules/system/userdomain.te @@ -1,5 +1,5 @@ -policy_module(userdomain, 4.3.1) +policy_module(userdomain, 4.3.2) ######################################## #