X-Git-Url: https://git.camperquake.de/gitweb.cgi?a=blobdiff_plain;f=tf2%2Ftf2.te;h=024594e5b1fd5145ca20b0cbfa81013b73e6a23d;hb=refs%2Fheads%2Fmaster;hp=1ef83e43bbdd90aac738d0e3cdbd2421ef4113c1;hpb=2577bee7f5f259449d730493d2c21cd86d3fe2c0;p=selinux.git diff --git a/tf2/tf2.te b/tf2/tf2.te index 1ef83e4..024594e 100644 --- a/tf2/tf2.te +++ b/tf2/tf2.te @@ -1,7 +1,8 @@ -policy_module(tf2, 0.1.28) +policy_module(tf2, 0.1.30) require { type default_t; + type games_data_t; } # File context for the executable process @@ -39,6 +40,9 @@ manage_files_pattern(tf2_t, tf2_rw_t, tf2_rw_t) manage_dirs_pattern(tf2_t, tf2_rw_t, tf2_rw_t) setattr_files_pattern(tf2_t, tf2_rw_t, tf2_rw_t) +# TF2 wants to create /tmp/dumps +files_manage_generic_tmp_dirs(tf2_t) + sysnet_dns_name_resolve(tf2_t) # Needed to load shared libs @@ -58,3 +62,5 @@ dontaudit tf2_t default_t:dir read; allow init_t tf2_t:process { noatsecure }; allow tf2_t self:process execmem; + +list_dirs_pattern(tf2_t, games_data_t, games_data_t)