diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if index b487fd4..49ac3fd 100644 --- a/policy/modules/system/userdomain.if +++ b/policy/modules/system/userdomain.if @@ -1584,6 +1584,24 @@ interface(`userdom_manage_user_home_content_dirs',` ######################################## ## <summary> +## Delete directories in a user home subdirectory. +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`userdom_delete_user_home_content_dirs',` + gen_require(` + type user_home_t; + ') + + allow $1 user_home_t:dir delete_dir_perms; +') + +######################################## +## <summary> ## Do not audit attempts to set the ## attributes of user home files. ## </summary> @@ -1696,6 +1714,24 @@ interface(`userdom_dontaudit_write_user_home_content_files',` ######################################## ## <summary> +## Delete files in a user home subdirectory. +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`userdom_delete_user_home_content_files',` + gen_require(` + type user_home_t; + ') + + allow $1 user_home_t:file delete_file_perms; +') + +######################################## +## <summary> ## Do not audit attempts to write user home files. ## </summary> ## <param name="domain"> @@ -1840,6 +1876,24 @@ interface(`userdom_manage_user_home_content_symlinks',` ######################################## ## <summary> +## Delete symbolic links in a user home directory. +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`userdom_delete_user_home_content_symlinks',` + gen_require(` + type user_home_t; + ') + + allow $1 user_home_t:lnk_file delete_lnk_file_perms; +') + +######################################## +## <summary> ## Create, read, write, and delete named pipes ## in a user home subdirectory. ## </summary>