Label .kde/share/apps/networkmanagement/certificates/ as home_cert_t

diff --git a/policy/modules/apps/gnome.if b/policy/modules/apps/gnome.if
index 00762c593bd30ab9017a8764735a321bf9957cfe..8fe4b662a642c55047fcbaf8ecaf56de1c8e429a 100644 (file)
--- a/policy/modules/apps/gnome.if
+++ b/policy/modules/apps/gnome.if
@@ -298,6 +298,37 @@ interface(`gnome_cache_filetrans',`
        userdom_search_user_home_dirs($1)
 ')
 
+########################################
+## <summary>
+##     Create objects in a Gnome cache home directory
+##     with an automatic type transition to
+##     a specified private type.
+## </summary>
+## <param name="domain">
+##     <summary>
+##     Domain allowed access.
+##     </summary>
+## </param>
+## <param name="private_type">
+##     <summary>
+##     The type of the object to create.
+##     </summary>
+## </param>
+## <param name="object_class">
+##     <summary>
+##     The class of the object to be created.
+##     </summary>
+## </param>
+#
+interface(`gnome_config_filetrans',`
+       gen_require(`
+               type config_home_t;
+       ')
+
+       filetrans_pattern($1, config_home_t, $2, $3, $4)
+       userdom_search_user_home_dirs($1)
+')
+
 ########################################
 ## <summary>
 ##     Read generic cache home files (.cache)

diff --git a/policy/modules/system/userdomain.fc b/policy/modules/system/userdomain.fc
index 494ec0899ee3ffe3e0b7cc100db46a616a9d2346..ce61aed7850aecd411f180508f8476b4986c3b4d 100644 (file)
--- a/policy/modules/system/userdomain.fc
+++ b/policy/modules/system/userdomain.fc
@@ -12,6 +12,7 @@ HOME_DIR/\.local/bin(/.*)?    gen_context(system_u:object_r:home_bin_t,s0)
 HOME_DIR/Audio(/.*)?    gen_context(system_u:object_r:audio_home_t,s0)
 HOME_DIR/Music(/.*)?    gen_context(system_u:object_r:audio_home_t,s0)
 HOME_DIR/\.cert(/.*)?  gen_context(system_u:object_r:home_cert_t,s0)
+HOME_DIR/.kde/share/apps/networkmanagement/certificates(/.*)?  gen_context(system_u:object_r:home_cert_t,s0)
 HOME_DIR/\.pki(/.*)?           gen_context(system_u:object_r:home_cert_t,s0)
 HOME_DIR/\.gvfs/.*     <<none>>
 HOME_DIR/\.debug(/.*)? <<none>>

diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if
index 0bb4d1e6195e30724cce4067e689afe6c9010385..0b3811da326fbb9cfd53068d6b0233aef442d222 100644 (file)
--- a/policy/modules/system/userdomain.if
+++ b/policy/modules/system/userdomain.if
@@ -5052,6 +5052,8 @@ interface(`userdom_filetrans_home_content',`
        userdom_user_home_dir_filetrans($1, audio_home_t, dir, "Music")
        userdom_user_home_dir_filetrans($1, home_cert_t, dir, ".cert")
        userdom_user_home_dir_filetrans($1, home_cert_t, dir, ".pki")
+       userdom_user_home_dir_filetrans($1, home_cert_t, dir, "certificates")
+       gnome_config_filetrans($1, home_cert_t, dir, "certificates")
 
        #optional_policy(`
        #       gnome_admin_home_gconf_filetrans($1, home_bin_t, dir, "bin")