]> git.ipfire.org Git - people/stevee/selinux-policy.git/commitdiff
Remove module for KDE.
authorStefan Schantl <stefan.schantl@ipfire.org>
Sat, 21 Jan 2012 17:39:33 +0000 (18:39 +0100)
committerStefan Schantl <stefan.schantl@ipfire.org>
Sat, 21 Jan 2012 17:39:33 +0000 (18:39 +0100)
policy/modules/admin/su.fc
policy/modules/apps/gnome.fc
policy/modules/apps/gnome.if
policy/modules/apps/kde.fc [deleted file]
policy/modules/apps/kde.if [deleted file]
policy/modules/apps/kde.te [deleted file]
policy/modules/kernel/corecommands.fc
policy/modules/services/gnomeclock.fc
policy/modules/system/userdomain.fc
policy/modules/system/userdomain.if

index 3d89250a6939626ab88f5c2a8bbebbaa25d9733c..7488c7235c4ac97f9ccbfbf07ccce701bff67f5b 100644 (file)
@@ -1,6 +1,3 @@
 
 /bin/su                        --      gen_context(system_u:object_r:su_exec_t,s0)
-
-/usr/(local/)?bin/ksu  --      gen_context(system_u:object_r:su_exec_t,s0)
-/usr/bin/kdesu         --      gen_context(system_u:object_r:su_exec_t,s0)
 /usr/bin/su            --      gen_context(system_u:object_r:su_exec_t,s0)
index 9f6139c145e75f5f4854614e7227bacb246a58a7..fba11e120b2837bad7031df8abf571479ac123a9 100644 (file)
@@ -1,7 +1,6 @@
 HOME_DIR/\.cache(/.*)? gen_context(system_u:object_r:cache_home_t,s0)
 HOME_DIR/\.color/icc(/.*)?     gen_context(system_u:object_r:icc_data_home_t,s0)
 HOME_DIR/\.config(/.*)?        gen_context(system_u:object_r:config_home_t,s0)
-HOME_DIR/\.kde(/.*)?   gen_context(system_u:object_r:config_home_t,s0)
 HOME_DIR/\.gconf(d)?(/.*)?     gen_context(system_u:object_r:gconf_home_t,s0)
 HOME_DIR/\.gnome2(/.*)?                gen_context(system_u:object_r:gnome_home_t,s0)
 HOME_DIR/\.gnome2/keyrings(/.*)?       gen_context(system_u:object_r:gkeyringd_gnome_home_t,s0)
@@ -17,7 +16,6 @@ HOME_DIR/\.xine(/.*)?         gen_context(system_u:object_r:config_home_t,s0)
 /root/\.cache(/.*)?    gen_context(system_u:object_r:cache_home_t,s0)
 /root/\.color/icc(/.*)?        gen_context(system_u:object_r:icc_data_home_t,s0)
 /root/\.config(/.*)?           gen_context(system_u:object_r:config_home_t,s0)
-/root/\.kde(/.*)?      gen_context(system_u:object_r:config_home_t,s0)
 /root/\.gconf(d)?(/.*)?        gen_context(system_u:object_r:gconf_home_t,s0)
 /root/\.gnome2(/.*)?           gen_context(system_u:object_r:gnome_home_t,s0)
 /root/\.gnome2/keyrings(/.*)?  gen_context(system_u:object_r:gkeyringd_gnome_home_t,s0)
@@ -42,4 +40,3 @@ HOME_DIR/\.xine(/.*)?         gen_context(system_u:object_r:config_home_t,s0)
 /usr/libexec/gconf-defaults-mechanism          --      gen_context(system_u:object_r:gconfdefaultsm_exec_t,s0)
 
 /usr/libexec/gnome-system-monitor-mechanism    --      gen_context(system_u:object_r:gnomesystemmm_exec_t,s0)
-/usr/libexec/kde(3|4)/ksysguardprocesslist_helper      --              gen_context(system_u:object_r:gnomesystemmm_exec_t,s0)
index 6ba6bbda17009c3f10fa311952c205c3aa82b4f1..1be6bcd7b28521e20a6df3f285cae6271d017110 100644 (file)
@@ -1149,48 +1149,6 @@ interface(`gnome_home_dir_filetrans',`
        userdom_search_user_home_dirs($1)
 ')
 
-######################################
-## <summary>
-##      Allow read kde config content
-## </summary>
-## <param name="domain">
-##      <summary>
-##      Domain allowed access.
-##      </summary>
-## </param>
-#
-interface(`gnome_read_usr_config',`
-        gen_require(`
-                type config_usr_t;
-        ')
-
-        files_search_usr($1)
-               list_dirs_pattern($1, config_usr_t, config_usr_t)
-               read_files_pattern($1, config_usr_t, config_usr_t)
-               read_lnk_files_pattern($1, config_usr_t, config_usr_t)  
-')
-
-#######################################
-## <summary>
-##      Allow manage kde config content
-## </summary>
-## <param name="domain">
-##      <summary>
-##      Domain allowed access.
-##      </summary>
-## </param>
-#
-interface(`gnome_manage_usr_config',`
-        gen_require(`
-                type config_usr_t;
-        ')
-
-        files_search_usr($1)
-               manage_dirs_pattern($1, config_usr_t, config_usr_t)
-               manage_files_pattern($1, config_usr_t, config_usr_t)
-               manage_lnk_files_pattern($1, config_usr_t, config_usr_t)
-')
-
 ########################################
 ## <summary>
 ##     Execute gnome-keyring in the user gkeyring domain
@@ -1244,7 +1202,6 @@ gen_require(`
        userdom_user_home_dir_filetrans($1, config_home_t, file, ".Xdefaults")
        userdom_user_home_dir_filetrans($1, config_home_t, dir, ".xine")
        userdom_user_home_dir_filetrans($1, cache_home_t, dir, ".cache")
-       userdom_user_home_dir_filetrans($1, config_home_t, dir, ".kde")
        userdom_user_home_dir_filetrans($1, gconf_home_t, dir, ".gconf")
        userdom_user_home_dir_filetrans($1, gconf_home_t, dir, ".gconfd")
        userdom_user_home_dir_filetrans($1, gconf_home_t, dir, ".local")
@@ -1284,7 +1241,6 @@ gen_require(`
        userdom_admin_home_dir_filetrans($1, config_home_t, file, ".Xdefaults")
        userdom_admin_home_dir_filetrans($1, config_home_t, dir, ".xine")
        userdom_admin_home_dir_filetrans($1, cache_home_t, dir, ".cache")
-       userdom_admin_home_dir_filetrans($1, config_home_t, dir, ".kde")
        userdom_admin_home_dir_filetrans($1, gconf_home_t, dir, ".gconf")
        userdom_admin_home_dir_filetrans($1, gconf_home_t, dir, ".gconfd")
        userdom_admin_home_dir_filetrans($1, gconf_home_t, dir, ".local")
diff --git a/policy/modules/apps/kde.fc b/policy/modules/apps/kde.fc
deleted file mode 100644 (file)
index 25e4b68..0000000
+++ /dev/null
@@ -1 +0,0 @@
-#/usr/libexec/kde(3|4)/backlighthelper --      gen_context(system_u:object_r:kdebacklighthelper_exec_t,s0)
diff --git a/policy/modules/apps/kde.if b/policy/modules/apps/kde.if
deleted file mode 100644 (file)
index cf65577..0000000
+++ /dev/null
@@ -1,22 +0,0 @@
-## <summary> Policy for KDE components </summary>
-
-#######################################
-## <summary>
-##      Send and receive messages from
-##      firewallgui over dbus.
-## </summary>
-## <param name="domain">
-##      <summary>
-##      Domain allowed access.
-##      </summary>
-## </param>
-#
-interface(`kde_dbus_chat_backlighthelper',`
-        gen_require(`
-                type kdebacklighthelper_t;
-                class dbus send_msg;
-        ')
-
-       allow $1 kdebacklighthelper_t:dbus send_msg;
-        allow kdebacklighthelper_t $1:dbus send_msg;
-')
diff --git a/policy/modules/apps/kde.te b/policy/modules/apps/kde.te
deleted file mode 100644 (file)
index 169421f..0000000
+++ /dev/null
@@ -1,40 +0,0 @@
-policy_module(kde,1.0.0)
-
-########################################
-#
-# Declarations
-#
-
-type kdebacklighthelper_t;
-type kdebacklighthelper_exec_t;
-dbus_system_domain(kdebacklighthelper_t, kdebacklighthelper_exec_t)
-
-########################################
-#
-# backlighthelper local policy
-#
-allow kdebacklighthelper_t self:fifo_file rw_fifo_file_perms;
-
-kernel_read_system_state(kdebacklighthelper_t)
-
-# r/w brightness values
-dev_rw_sysfs(kdebacklighthelper_t)
-
-files_read_etc_files(kdebacklighthelper_t)
-files_read_etc_runtime_files(kdebacklighthelper_t)
-files_read_usr_files(kdebacklighthelper_t)
-
-fs_getattr_all_fs(kdebacklighthelper_t)
-
-logging_send_syslog_msg(kdebacklighthelper_t)
-
-miscfiles_read_localization(kdebacklighthelper_t)
-
-optional_policy(`
-       consolekit_dbus_chat(kdebacklighthelper_t)
-')
-
-optional_policy(`
-       policykit_dbus_chat(kdebacklighthelper_t)
-')
-
index 705efb3c858607910c4040b8e32bafb42c1411e5..7441b55882df5ab90910eef22e026311db4030ee 100644 (file)
@@ -68,9 +68,6 @@ ifdef(`distro_redhat',`
 
 /etc/init\.d/functions         --      gen_context(system_u:object_r:bin_t,s0)
 
-/etc/kde/env(/.*)?                     gen_context(system_u:object_r:bin_t,s0)
-/etc/kde/shutdown(/.*)?                        gen_context(system_u:object_r:bin_t,s0)
-
 /etc/mail/make                 --      gen_context(system_u:object_r:bin_t,s0)
 /etc/mcelog/cache-error-trigger        --      gen_context(system_u:object_r:bin_t,s0)
 /etc/mcelog/triggers(/.*)?             gen_context(system_u:object_r:bin_t,s0)
@@ -348,7 +345,6 @@ ifdef(`distro_redhat', `
 /usr/share/fedora-usermgmt/wrapper --  gen_context(system_u:object_r:bin_t,s0)
 /usr/share/hplip/[^/]*         --      gen_context(system_u:object_r:bin_t,s0)
 /usr/share/hwbrowser/hwbrowser --      gen_context(system_u:object_r:bin_t,s0)
-/usr/share/kde4/apps/kajongg/kajongg.py --     gen_context(system_u:object_r:bin_t,s0)
 /usr/share/pwlib/make/ptlib-config --  gen_context(system_u:object_r:bin_t,s0)
 /usr/share/pydict/pydict\.py   --      gen_context(system_u:object_r:bin_t,s0)
 /usr/share/rhn/rhn_applet/applet\.py -- gen_context(system_u:object_r:bin_t,s0)
index 5df751b6c89b7ed8b76f6903212bf9744597236c..71dcbba588c291e0b091f9c51a800d544f297db0 100644 (file)
@@ -2,5 +2,3 @@
 /usr/libexec/gnome-clock-applet-mechanism      --      gen_context(system_u:object_r:gnomeclock_exec_t,s0)
 
 /usr/libexec/gsd-datetime-mechanism            --      gen_context(system_u:object_r:gnomeclock_exec_t,s0)
-
-/usr/libexec/kde(3|4)/kcmdatetimehelper                --      gen_context(system_u:object_r:gnomeclock_exec_t,s0)
index ec851899761c3d43673a74224f2c3a27d4af1be5..b66f611ee2b92e5cd94be6905ebef7b78c690cda 100644 (file)
@@ -11,7 +11,6 @@ HOME_DIR/\.local/bin(/.*)?    gen_context(system_u:object_r:home_bin_t,s0)
 HOME_DIR/Audio(/.*)?    gen_context(system_u:object_r:audio_home_t,s0)
 HOME_DIR/Music(/.*)?    gen_context(system_u:object_r:audio_home_t,s0)
 HOME_DIR/\.cert(/.*)?  gen_context(system_u:object_r:home_cert_t,s0)
-HOME_DIR/.kde/share/apps/networkmanagement/certificates(/.*)?  gen_context(system_u:object_r:home_cert_t,s0)
 HOME_DIR/\.pki(/.*)?           gen_context(system_u:object_r:home_cert_t,s0)
 HOME_DIR/\.gvfs/.*     <<none>>
 HOME_DIR/\.debug(/.*)? <<none>>
index 10b54670a6b8785586bd866456e5c960f94f0dcb..9ed42917dec8780b18a2e77f32829cbb5feaea9a 100644 (file)
@@ -727,10 +727,6 @@ template(`userdom_common_user_template',`
                        hal_dbus_chat($1_usertype)
                ')
 
-               optional_policy(`
-                       kde_dbus_chat_backlighthelper($1_usertype)
-               ')
-
                optional_policy(`
                        modemmanager_dbus_chat($1_usertype)
                ')