diff options
author | John Turner <jturner.usa@gmail.com> | 2025-08-20 18:15:24 -0400 |
---|---|---|
committer | John Turner <jturner.usa@gmail.com> | 2025-08-20 22:08:42 -0400 |
commit | bb228574d78232d407b78f90faf39fff28cb6c5b (patch) | |
tree | 8221331e8f837d6d4eafa9b55f2b471f0d442f06 /src/file/homefile/userfile.cil | |
parent | d423f2bca3f9161c3c9abd58898e8cc3744a0832 (diff) | |
download | selinux-policy-bb228574d78232d407b78f90faf39fff28cb6c5b.tar.gz |
rework how user files work
Instead of assuming all user files exist under $HOME, we create a
.file.user module and typeattribute. This allows user files to exist
in places outside of $HOME. Also we changed filecon so that $HOME
itself is user.home.file rather than home.file.
Diffstat (limited to 'src/file/homefile/userfile.cil')
-rw-r--r-- | src/file/homefile/userfile.cil | 47 |
1 files changed, 0 insertions, 47 deletions
diff --git a/src/file/homefile/userfile.cil b/src/file/homefile/userfile.cil deleted file mode 100644 index ff6a6e2..0000000 --- a/src/file/homefile/userfile.cil +++ /dev/null @@ -1,47 +0,0 @@ -;; Copyright (C) 2025 John Turner - -;; This program is free software: you can redistribute it and/or modify -;; it under the terms of the GNU General Public License as published by -;; the Free Software Foundation, either version 3 of the License, or -;; (at your option) any later version. - -;; This program is distributed in the hope that it will be useful, -;; but WITHOUT ANY WARRANTY; without even the implied warranty of -;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -;; GNU General Public License for more details. - -;; You should have received a copy of the GNU General Public License -;; along with this program. If not, see <https://www.gnu.org/licenses/>. - -(in file.home - - (block user - - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) - - (typeattribute typeattr) - - (call file.home.type (typeattr)) - - (block base_template - - (blockabstract base_template) - - (blockinherit .file.home.base_template) - - (call .file.home.user.type (file))) - - (block template - - (blockabstract template) - - (blockinherit .file.home.template)))) - -(in user - - (block home - - (filecon "HOME_DIR/.*" any file_context) - - (blockinherit .file.home.user.template))) |