diff --git a/refpolicy/policy/modules/system/userdomain.te b/refpolicy/policy/modules/system/userdomain.te index 01e92ac..e530c6c 100644 --- a/refpolicy/policy/modules/system/userdomain.te +++ b/refpolicy/policy/modules/system/userdomain.te @@ -66,14 +66,19 @@ bool user_tcp_server false; # Allow w to display everyone bool user_ttyfile_stat false; +admin_domain_template(sysadm) user_domain_template(staff) user_domain_template(user) -type sysadm_t; -domain_make_domain(sysadm_t) -per_userdomain_templates(sysadm) - ######################################## # # Local policy # + +#allow privhome home_root_t:dir { getattr search }; + +# for su +allow sysadm_t userdomain:fd use; + +# Add/remove user home directories +#file_type_auto_trans(sysadm_t, home_root_t, user_home_dir_t, dir)