summaryrefslogtreecommitdiff
path: root/src/file/userfile.cil
diff options
context:
space:
mode:
authorJohn Turner <jturner.usa@gmail.com>2025-08-20 18:15:24 -0400
committerJohn Turner <jturner.usa@gmail.com>2025-08-20 22:08:42 -0400
commitbb228574d78232d407b78f90faf39fff28cb6c5b (patch)
tree8221331e8f837d6d4eafa9b55f2b471f0d442f06 /src/file/userfile.cil
parentd423f2bca3f9161c3c9abd58898e8cc3744a0832 (diff)
downloadselinux-policy-bb228574d78232d407b78f90faf39fff28cb6c5b.tar.gz
rework how user files work
Instead of assuming all user files exist under $HOME, we create a .file.user module and typeattribute. This allows user files to exist in places outside of $HOME. Also we changed filecon so that $HOME itself is user.home.file rather than home.file.
Diffstat (limited to 'src/file/userfile.cil')
-rw-r--r--src/file/userfile.cil32
1 files changed, 32 insertions, 0 deletions
diff --git a/src/file/userfile.cil b/src/file/userfile.cil
new file mode 100644
index 0000000..7ca2150
--- /dev/null
+++ b/src/file/userfile.cil
@@ -0,0 +1,32 @@
+;; Copyright (C) 2025 John Turner
+
+;; This program is free software: you can redistribute it and/or modify
+;; it under the terms of the GNU General Public License as published by
+;; the Free Software Foundation, either version 3 of the License, or
+;; (at your option) any later version.
+
+;; This program is distributed in the hope that it will be useful,
+;; but WITHOUT ANY WARRANTY; without even the implied warranty of
+;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+;; GNU General Public License for more details.
+
+;; You should have received a copy of the GNU General Public License
+;; along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+(in file
+ (block user
+ (macro type ((type ARG1))
+ (typeattributeset typeattr ARG1))
+
+ (typeattribute typeattr)
+
+ (call file.type (typeattr))
+
+ (block base_template
+ (blockabstract base_template)
+ (blockinherit .file.base_template)
+ (call .file.user.type (file)))
+
+ (block template
+ (blockabstract template)
+ (blockinherit .file.template))))