summaryrefslogtreecommitdiff
path: root/src/file/userfile/sshfile.cil
diff options
context:
space:
mode:
authorJohn Turner <jturner.usa@gmail.com>2025-08-20 18:15:24 -0400
committerJohn Turner <jturner.usa@gmail.com>2025-08-20 22:08:42 -0400
commitbb228574d78232d407b78f90faf39fff28cb6c5b (patch)
tree8221331e8f837d6d4eafa9b55f2b471f0d442f06 /src/file/userfile/sshfile.cil
parentd423f2bca3f9161c3c9abd58898e8cc3744a0832 (diff)
downloadselinux-policy-bb228574d78232d407b78f90faf39fff28cb6c5b.tar.gz
rework how user files work
Instead of assuming all user files exist under $HOME, we create a .file.user module and typeattribute. This allows user files to exist in places outside of $HOME. Also we changed filecon so that $HOME itself is user.home.file rather than home.file.
Diffstat (limited to 'src/file/userfile/sshfile.cil')
-rw-r--r--src/file/userfile/sshfile.cil21
1 files changed, 21 insertions, 0 deletions
diff --git a/src/file/userfile/sshfile.cil b/src/file/userfile/sshfile.cil
new file mode 100644
index 0000000..ac3ab86
--- /dev/null
+++ b/src/file/userfile/sshfile.cil
@@ -0,0 +1,21 @@
+;; Copyright (C) 2025 John Turner
+
+;; This program is free software: you can redistribute it and/or modify
+;; it under the terms of the GNU General Public License as published by
+;; the Free Software Foundation, either version 3 of the License, or
+;; (at your option) any later version.
+
+;; This program is distributed in the hope that it will be useful,
+;; but WITHOUT ANY WARRANTY; without even the implied warranty of
+;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+;; GNU General Public License for more details.
+
+;; You should have received a copy of the GNU General Public License
+;; along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+(in file.user
+ (block ssh
+ (blockinherit .file.user.template)
+
+ (filecon "HOME_DIR/\.ssh" dir file_context)
+ (filecon "HOME_DIR/\.ssh/.*" file file_context)))