commit:     06ba03b1498bde018ab1287df5f00394b8723bf1
Author:     Luis Ressel <aranea <AT> aixah <DOT> de>
AuthorDate: Sun Oct 14 10:05:06 2018 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sun Nov 11 23:17:31 2018 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=06ba03b1

miscfiles: Label /usr/share/texmf*/fonts/ as fonts_t

fontconfig can be configure to use the TeX Live fonts in addition to
/usr/share/fonts/.

Signed-off-by: Jason Zaman <jason <AT> perfinion.com>

 policy/modules/system/miscfiles.fc | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/policy/modules/system/miscfiles.fc 
b/policy/modules/system/miscfiles.fc
index 48e4c6ad..572a15df 100644
--- a/policy/modules/system/miscfiles.fc
+++ b/policy/modules/system/miscfiles.fc
@@ -50,9 +50,12 @@ ifdef(`distro_redhat',`
 /usr/local/share/fonts(/.*)?   gen_context(system_u:object_r:fonts_t,s0)
 
 /usr/share/docbook2X/xslt/man(/.*)?    gen_context(system_u:object_r:usr_t,s0)
+
 /usr/share/fonts(/.*)?         gen_context(system_u:object_r:fonts_t,s0)
-/usr/share/X11/fonts(/.*)?     gen_context(system_u:object_r:fonts_t,s0)
 /usr/share/ghostscript/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
+/usr/share/texmf[^/]*/fonts(/.*)? gen_context(system_u:object_r:fonts_t,s0)
+/usr/share/X11/fonts(/.*)?     gen_context(system_u:object_r:fonts_t,s0)
+
 /usr/share/locale(/.*)?                
gen_context(system_u:object_r:locale_t,s0)
 /usr/share/X11/locale(/.*)?    gen_context(system_u:object_r:locale_t,s0)
 /usr/share/zoneinfo(/.*)?      gen_context(system_u:object_r:locale_t,s0)

Reply via email to