diff options
author | John Turner <jturner.usa@gmail.com> | 2025-08-20 18:15:24 -0400 |
---|---|---|
committer | John Turner <jturner.usa@gmail.com> | 2025-08-20 22:08:42 -0400 |
commit | bb228574d78232d407b78f90faf39fff28cb6c5b (patch) | |
tree | 8221331e8f837d6d4eafa9b55f2b471f0d442f06 /src/file/userfile.cil | |
parent | d423f2bca3f9161c3c9abd58898e8cc3744a0832 (diff) | |
download | selinux-policy-bb228574d78232d407b78f90faf39fff28cb6c5b.tar.gz |
rework how user files work
Instead of assuming all user files exist under $HOME, we create a
.file.user module and typeattribute. This allows user files to exist
in places outside of $HOME. Also we changed filecon so that $HOME
itself is user.home.file rather than home.file.
Diffstat (limited to 'src/file/userfile.cil')
-rw-r--r-- | src/file/userfile.cil | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/src/file/userfile.cil b/src/file/userfile.cil new file mode 100644 index 0000000..7ca2150 --- /dev/null +++ b/src/file/userfile.cil @@ -0,0 +1,32 @@ +;; Copyright (C) 2025 John Turner + +;; This program is free software: you can redistribute it and/or modify +;; it under the terms of the GNU General Public License as published by +;; the Free Software Foundation, either version 3 of the License, or +;; (at your option) any later version. + +;; This program is distributed in the hope that it will be useful, +;; but WITHOUT ANY WARRANTY; without even the implied warranty of +;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +;; GNU General Public License for more details. + +;; You should have received a copy of the GNU General Public License +;; along with this program. If not, see <https://www.gnu.org/licenses/>. + +(in file + (block user + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) + + (typeattribute typeattr) + + (call file.type (typeattr)) + + (block base_template + (blockabstract base_template) + (blockinherit .file.base_template) + (call .file.user.type (file))) + + (block template + (blockabstract template) + (blockinherit .file.template)))) |