diff --git a/policy-f18-contrib.patch b/policy-f18-contrib.patch index a6e4e46..de3957c 100644 --- a/policy-f18-contrib.patch +++ b/policy-f18-contrib.patch @@ -9101,16 +9101,19 @@ index 806191a..c0df94c 100644 +logging_send_syslog_msg(cgred_t) diff --git a/chrome.fc b/chrome.fc new file mode 100644 -index 0000000..88107d7 +index 0000000..b91be6e --- /dev/null +++ b/chrome.fc -@@ -0,0 +1,6 @@ +@@ -0,0 +1,9 @@ +/opt/google/chrome/chrome-sandbox -- gen_context(system_u:object_r:chrome_sandbox_exec_t,s0) + +/usr/lib/chromium-browser/chrome-sandbox -- gen_context(system_u:object_r:chrome_sandbox_exec_t,s0) + +/opt/google/chrome/nacl_helper_bootstrap -- gen_context(system_u:object_r:chrome_sandbox_nacl_exec_t,s0) +/usr/lib/chromium-browser/nacl_helper_bootstrap -- gen_context(system_u:object_r:chrome_sandbox_nacl_exec_t,s0) ++ ++HOME_DIR/\.cache/google-chrome(/.*)? gen_context(system_u:object_r:chrome_sandbox_home_t,s0) ++HOME_DIR/\.cache/chromium(/.*)? gen_context(system_u:object_r:chrome_sandbox_home_t,s0) diff --git a/chrome.if b/chrome.if new file mode 100644 index 0000000..5977d96 @@ -9253,10 +9256,10 @@ index 0000000..5977d96 +') diff --git a/chrome.te b/chrome.te new file mode 100644 -index 0000000..3168658 +index 0000000..70d6d78 --- /dev/null +++ b/chrome.te -@@ -0,0 +1,208 @@ +@@ -0,0 +1,211 @@ +policy_module(chrome,1.0.0) + +######################################## @@ -9283,6 +9286,9 @@ index 0000000..3168658 +role system_r types chrome_sandbox_nacl_t; +ubac_constrained(chrome_sandbox_nacl_t) + ++type chrome_sandbox_home_t; ++userdom_user_home_content(chrome_sandbox_home_t) ++ +######################################## +# +# chrome_sandbox local policy