diff options
author | John Turner <jturner.usa@gmail.com> | 2025-08-20 18:15:24 -0400 |
---|---|---|
committer | John Turner <jturner.usa@gmail.com> | 2025-08-21 17:47:14 -0400 |
commit | ebf8a5222434ed15b16b3fb8015ebedac795bb65 (patch) | |
tree | eb7bfabb72adce39bcc558857211acccdbb3cf3f /src/file/homefile/user/sshfile.cil | |
parent | d423f2bca3f9161c3c9abd58898e8cc3744a0832 (diff) | |
download | selinux-policy-ebf8a5222434ed15b16b3fb8015ebedac795bb65.tar.gz |
rework how user files work
Instead of assuming all user files exist under $HOME, we create a
.file.user module and typeattribute. This allows user files to exist
in places outside of $HOME. Also we changed filecon so that $HOME
itself is user.home.file rather than home.file.
Diffstat (limited to 'src/file/homefile/user/sshfile.cil')
-rw-r--r-- | src/file/homefile/user/sshfile.cil | 41 |
1 files changed, 0 insertions, 41 deletions
diff --git a/src/file/homefile/user/sshfile.cil b/src/file/homefile/user/sshfile.cil deleted file mode 100644 index 377b144..0000000 --- a/src/file/homefile/user/sshfile.cil +++ /dev/null @@ -1,41 +0,0 @@ -;; Copyright (C) 2025 John Turner - -;; This program is free software: you can redistribute it and/or modify -;; it under the terms of the GNU General Public License as published by -;; the Free Software Foundation, either version 3 of the License, or -;; (at your option) any later version. - -;; This program is distributed in the hope that it will be useful, -;; but WITHOUT ANY WARRANTY; without even the implied warranty of -;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -;; GNU General Public License for more details. - -;; You should have received a copy of the GNU General Public License -;; along with this program. If not, see <https://www.gnu.org/licenses/>. - -(in file.home.user - - (block ssh - - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) - - (typeattribute typeattr) - - (call file.home.user.type (typeattr)) - - (block base_template - - (blockabstract base_template) - - (blockinherit .file.home.user.base_template) - - (call .file.home.user.ssh.type (file))))) - -(block ssh - - (block home - - (filecon "HOME_DIR/\.ssh(/.*)?" any file_context) - - (blockinherit .file.home.user.ssh.base_template))) |