commit: 6315a80f5f47dda2fd6427b68db062b838e954c9 Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be> AuthorDate: Thu Jun 11 16:04:06 2015 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Thu Jun 11 16:04:06 2015 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=6315a80f
Add manage interfaces for XDG documents, pictures and music policy/modules/contrib/xdg.if | 57 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 57 insertions(+) diff --git a/policy/modules/contrib/xdg.if b/policy/modules/contrib/xdg.if index 2bf63c9..55747d3 100644 --- a/policy/modules/contrib/xdg.if +++ b/policy/modules/contrib/xdg.if @@ -1141,6 +1141,63 @@ interface(`xdg_relabel_all_runtime_home',` ######################################### ## <summary> +## Manage documents content +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access +## </summary> +## </param> +# +interface(`xdg_manage_documents_home',` + gen_require(` + type xdg_documents_home_t; + ') + + manage_dirs_pattern($1, xdg_documents_home_t, xdg_documents_home_t) + manage_files_pattern($1, xdg_documents_home_t, xdg_documents_home_t) +') + +######################################### +## <summary> +## Manage music content +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access +## </summary> +## </param> +# +interface(`xdg_manage_music_home',` + gen_require(` + type xdg_music_home_t; + ') + + manage_dirs_pattern($1, xdg_music_home_t, xdg_music_home_t) + manage_files_pattern($1, xdg_music_home_t, xdg_music_home_t) +') + +######################################### +## <summary> +## Manage pictures content +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access +## </summary> +## </param> +# +interface(`xdg_manage_pictures_home',` + gen_require(` + type xdg_pictures_home_t; + ') + + manage_dirs_pattern($1, xdg_pictures_home_t, xdg_pictures_home_t) + manage_files_pattern($1, xdg_pictures_home_t, xdg_pictures_home_t) +') + +######################################### +## <summary> ## Manage video content ## </summary> ## <param name="domain">