@@ -26935,7 +26972,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
## This template creates a user domain, types, and
## rules for the user's tty, pty, home directories,
## tmp, and tmpfs files.
-@@ -1193,12 +1184,11 @@
+@@ -1193,12 +1185,11 @@
# and may change other protocols
tunable_policy(`user_tcp_server',`
corenet_tcp_bind_all_nodes($1_t)
@@ -26950,7 +26987,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
# Run pppd in pppd_t by default for user
-@@ -1207,7 +1197,23 @@
+@@ -1207,7 +1198,23 @@
')
optional_policy(`
@@ -26975,7 +27012,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
')
-@@ -1284,8 +1290,6 @@
+@@ -1284,8 +1291,6 @@
# Manipulate other users crontab.
allow $1_t self:passwd crontab;
@@ -26984,7 +27021,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
kernel_read_software_raid_state($1_t)
kernel_getattr_core_if($1_t)
kernel_getattr_message_if($1_t)
-@@ -1363,13 +1367,6 @@
+@@ -1363,13 +1368,6 @@
# But presently necessary for installing the file_contexts file.
seutil_manage_bin_policy($1_t)
@@ -26998,7 +27035,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
optional_policy(`
userhelper_exec($1_t)
')
-@@ -1422,6 +1419,7 @@
+@@ -1422,6 +1420,7 @@
dev_relabel_all_dev_nodes($1)
files_create_boot_flag($1)
@@ -27006,7 +27043,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
# Necessary for managing /boot/efi
fs_manage_dos_files($1)
-@@ -1787,10 +1785,14 @@
+@@ -1787,10 +1786,14 @@
template(`userdom_user_home_content',`
gen_require(`
attribute $1_file_type;
@@ -27022,7 +27059,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -1886,11 +1888,11 @@
+@@ -1886,11 +1889,11 @@
#
template(`userdom_search_user_home_dirs',`
gen_require(`
@@ -27036,7 +27073,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -1920,11 +1922,11 @@
+@@ -1920,11 +1923,11 @@
#
template(`userdom_list_user_home_dirs',`
gen_require(`
@@ -27050,7 +27087,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -1968,12 +1970,12 @@
+@@ -1968,12 +1971,12 @@
#
template(`userdom_user_home_domtrans',`
gen_require(`
@@ -27066,7 +27103,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2003,10 +2005,10 @@
+@@ -2003,10 +2006,10 @@
#
template(`userdom_dontaudit_list_user_home_dirs',`
gen_require(`
@@ -27079,7 +27116,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2038,11 +2040,47 @@
+@@ -2038,11 +2041,47 @@
#
template(`userdom_manage_user_home_content_dirs',`
gen_require(`
@@ -27129,7 +27166,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2074,10 +2112,10 @@
+@@ -2074,10 +2113,10 @@
#
template(`userdom_dontaudit_setattr_user_home_content_files',`
gen_require(`
@@ -27142,7 +27179,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2107,11 +2145,11 @@
+@@ -2107,11 +2146,11 @@
#
template(`userdom_read_user_home_content_files',`
gen_require(`
@@ -27156,7 +27193,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2141,11 +2179,11 @@
+@@ -2141,11 +2180,11 @@
#
template(`userdom_dontaudit_read_user_home_content_files',`
gen_require(`
@@ -27171,7 +27208,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2175,10 +2213,14 @@
+@@ -2175,10 +2214,14 @@
#
template(`userdom_dontaudit_write_user_home_content_files',`
gen_require(`
@@ -27188,7 +27225,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2208,11 +2250,11 @@
+@@ -2208,11 +2251,11 @@
#
template(`userdom_read_user_home_content_symlinks',`
gen_require(`
@@ -27202,7 +27239,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2242,11 +2284,11 @@
+@@ -2242,11 +2285,11 @@
#
template(`userdom_exec_user_home_content_files',`
gen_require(`
@@ -27216,7 +27253,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2276,10 +2318,10 @@
+@@ -2276,10 +2319,10 @@
#
template(`userdom_dontaudit_exec_user_home_content_files',`
gen_require(`
@@ -27229,7 +27266,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2311,12 +2353,12 @@
+@@ -2311,12 +2354,12 @@
#
template(`userdom_manage_user_home_content_files',`
gen_require(`
@@ -27245,7 +27282,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2348,10 +2390,10 @@
+@@ -2348,10 +2391,10 @@
#
template(`userdom_dontaudit_manage_user_home_content_dirs',`
gen_require(`
@@ -27258,7 +27295,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2383,12 +2425,12 @@
+@@ -2383,12 +2426,12 @@
#
template(`userdom_manage_user_home_content_symlinks',`
gen_require(`
@@ -27274,7 +27311,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2420,12 +2462,12 @@
+@@ -2420,12 +2463,12 @@
#
template(`userdom_manage_user_home_content_pipes',`
gen_require(`
@@ -27290,7 +27327,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2457,12 +2499,12 @@
+@@ -2457,12 +2500,12 @@
#
template(`userdom_manage_user_home_content_sockets',`
gen_require(`
@@ -27306,7 +27343,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2507,11 +2549,11 @@
+@@ -2507,11 +2550,11 @@
#
template(`userdom_user_home_dir_filetrans',`
gen_require(`
@@ -27320,7 +27357,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2556,11 +2598,11 @@
+@@ -2556,11 +2599,11 @@
#
template(`userdom_user_home_content_filetrans',`
gen_require(`
@@ -27334,7 +27371,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2600,11 +2642,11 @@
+@@ -2600,11 +2643,11 @@
#
template(`userdom_user_home_dir_filetrans_user_home_content',`
gen_require(`
@@ -27348,7 +27385,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2634,11 +2676,11 @@
+@@ -2634,11 +2677,11 @@
#
template(`userdom_write_user_tmp_sockets',`
gen_require(`
@@ -27362,7 +27399,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2668,11 +2710,11 @@
+@@ -2668,11 +2711,11 @@
#
template(`userdom_list_user_tmp',`
gen_require(`
@@ -27376,7 +27413,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2704,10 +2746,10 @@
+@@ -2704,10 +2747,10 @@
#
template(`userdom_dontaudit_list_user_tmp',`
gen_require(`
@@ -27389,7 +27426,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2739,10 +2781,10 @@
+@@ -2739,10 +2782,10 @@
#
template(`userdom_dontaudit_manage_user_tmp_dirs',`
gen_require(`
@@ -27402,7 +27439,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2772,12 +2814,12 @@
+@@ -2772,12 +2815,12 @@
#
template(`userdom_read_user_tmp_files',`
gen_require(`
@@ -27418,7 +27455,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2809,10 +2851,10 @@
+@@ -2809,10 +2852,10 @@
#
template(`userdom_dontaudit_read_user_tmp_files',`
gen_require(`
@@ -27431,7 +27468,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2844,10 +2886,48 @@
+@@ -2844,10 +2887,48 @@
#
template(`userdom_dontaudit_append_user_tmp_files',`
gen_require(`
@@ -27482,7 +27519,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2877,12 +2957,12 @@
+@@ -2877,12 +2958,12 @@
#
template(`userdom_rw_user_tmp_files',`
gen_require(`
@@ -27498,7 +27535,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2914,10 +2994,10 @@
+@@ -2914,10 +2995,10 @@
#
template(`userdom_dontaudit_manage_user_tmp_files',`
gen_require(`
@@ -27511,7 +27548,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2949,12 +3029,12 @@
+@@ -2949,12 +3030,12 @@
#
template(`userdom_read_user_tmp_symlinks',`
gen_require(`
@@ -27527,7 +27564,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -2986,11 +3066,11 @@
+@@ -2986,11 +3067,11 @@
#
template(`userdom_manage_user_tmp_dirs',`
gen_require(`
@@ -27541,7 +27578,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -3022,11 +3102,11 @@
+@@ -3022,11 +3103,11 @@
#
template(`userdom_manage_user_tmp_files',`
gen_require(`
@@ -27555,7 +27592,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -3058,11 +3138,11 @@
+@@ -3058,11 +3139,11 @@
#
template(`userdom_manage_user_tmp_symlinks',`
gen_require(`
@@ -27569,7 +27606,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -3094,11 +3174,11 @@
+@@ -3094,11 +3175,11 @@
#
template(`userdom_manage_user_tmp_pipes',`
gen_require(`
@@ -27583,7 +27620,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -3130,11 +3210,11 @@
+@@ -3130,11 +3211,11 @@
#
template(`userdom_manage_user_tmp_sockets',`
gen_require(`
@@ -27597,7 +27634,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -3179,10 +3259,10 @@
+@@ -3179,10 +3260,10 @@
#
template(`userdom_user_tmp_filetrans',`
gen_require(`
@@ -27610,7 +27647,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
files_search_tmp($2)
')
-@@ -3223,10 +3303,10 @@
+@@ -3223,10 +3304,10 @@
#
template(`userdom_tmp_filetrans_user_tmp',`
gen_require(`
@@ -27623,7 +27660,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -3254,6 +3334,42 @@
+@@ -3254,6 +3335,42 @@
##
##
#
@@ -27666,7 +27703,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
template(`userdom_rw_user_tmpfs_files',`
gen_require(`
type $1_tmpfs_t;
-@@ -4231,11 +4347,11 @@
+@@ -4231,11 +4348,11 @@
#
interface(`userdom_search_staff_home_dirs',`
gen_require(`
@@ -27680,7 +27717,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -4251,10 +4367,10 @@
+@@ -4251,10 +4368,10 @@
#
interface(`userdom_dontaudit_search_staff_home_dirs',`
gen_require(`
@@ -27693,7 +27730,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -4270,11 +4386,11 @@
+@@ -4270,11 +4387,11 @@
#
interface(`userdom_manage_staff_home_dirs',`
gen_require(`
@@ -27707,7 +27744,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -4289,16 +4405,16 @@
+@@ -4289,16 +4406,16 @@
#
interface(`userdom_relabelto_staff_home_dirs',`
gen_require(`
@@ -27727,7 +27764,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
## users home directory.
##
##
-@@ -4307,12 +4423,27 @@
+@@ -4307,12 +4424,27 @@
##
##
#
@@ -27758,7 +27795,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -4327,13 +4458,13 @@
+@@ -4327,13 +4459,13 @@
#
interface(`userdom_read_staff_home_content_files',`
gen_require(`
@@ -27776,7 +27813,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -4531,10 +4662,10 @@
+@@ -4531,10 +4663,10 @@
#
interface(`userdom_getattr_sysadm_home_dirs',`
gen_require(`
@@ -27789,7 +27826,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -4551,10 +4682,10 @@
+@@ -4551,10 +4683,10 @@
#
interface(`userdom_dontaudit_getattr_sysadm_home_dirs',`
gen_require(`
@@ -27802,7 +27839,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -4569,10 +4700,10 @@
+@@ -4569,10 +4701,10 @@
#
interface(`userdom_search_sysadm_home_dirs',`
gen_require(`
@@ -27815,7 +27852,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -4588,10 +4719,10 @@
+@@ -4588,10 +4720,10 @@
#
interface(`userdom_dontaudit_search_sysadm_home_dirs',`
gen_require(`
@@ -27828,7 +27865,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -4606,10 +4737,10 @@
+@@ -4606,10 +4738,10 @@
#
interface(`userdom_list_sysadm_home_dirs',`
gen_require(`
@@ -27841,7 +27878,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -4625,10 +4756,10 @@
+@@ -4625,10 +4757,10 @@
#
interface(`userdom_dontaudit_list_sysadm_home_dirs',`
gen_require(`
@@ -27854,7 +27891,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -4644,12 +4775,11 @@
+@@ -4644,12 +4776,11 @@
#
interface(`userdom_dontaudit_read_sysadm_home_content_files',`
gen_require(`
@@ -27870,7 +27907,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -4676,10 +4806,10 @@
+@@ -4676,10 +4807,10 @@
#
interface(`userdom_sysadm_home_dir_filetrans',`
gen_require(`
@@ -27883,7 +27920,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -4694,10 +4824,10 @@
+@@ -4694,10 +4825,10 @@
#
interface(`userdom_search_sysadm_home_content_dirs',`
gen_require(`
@@ -27896,7 +27933,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -4712,13 +4842,13 @@
+@@ -4712,13 +4843,13 @@
#
interface(`userdom_read_sysadm_home_content_files',`
gen_require(`
@@ -27914,7 +27951,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -4754,11 +4884,49 @@
+@@ -4754,11 +4885,49 @@
#
interface(`userdom_search_all_users_home_dirs',`
gen_require(`
@@ -27965,7 +28002,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -4778,6 +4946,14 @@
+@@ -4778,6 +4947,14 @@
files_list_home($1)
allow $1 home_dir_type:dir list_dir_perms;
@@ -27980,7 +28017,7 @@ diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/system/userdo
')
########################################
-@@ -4839,6 +5015,26 @@
+@@ -4839,6 +5016,26 @@
########################################
##