selinux-policy/Fix-bug-in-userdom_restricted_xwindows_user_template.patch
2019-09-30 11:16:49 -04:00

29 lines
888 B
Diff

From 0269451c9568aa7939b0fef6708d867fcd2ffd47 Mon Sep 17 00:00:00 2001
From: Lukas Vrabec <lvrabec@redhat.com>
Date: Thu, 21 Feb 2019 16:12:18 +0100
Subject: [PATCH 083/109] Fix bug in
userdom_restricted_xwindows_user_template() template to disallow all user
domains to access admin_home_t
Fixes: #221
---
policy/modules/system/userdomain.if | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if
index 90a8a7533..4988fdd41 100644
--- a/policy/modules/system/userdomain.if
+++ b/policy/modules/system/userdomain.if
@@ -1345,7 +1345,7 @@ template(`userdom_restricted_xwindows_user_template',`
optional_policy(`
pulseaudio_role($1_r, $1_usertype)
- pulseaudio_filetrans_admin_home_content($1_usertype)
+ pulseaudio_filetrans_home_content($1_usertype)
')
optional_policy(`
--
2.19.1