commit: 8f9a8d44ce4ec0d2229d5bd9363a56621416676c Author: Christian Göttsche <cgzones <AT> googlemail <DOT> com> AuthorDate: Sun Jan 31 20:50:18 2021 +0000 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> CommitDate: Sat Feb 6 20:54:11 2021 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=8f9a8d44
genhomedircon: require match for home directory name Use regular expression '/[^/]+' instead of '/[^/]*', like semodule's genhomedircon. Generates file contexts like '/home/[^/]+/dead\.letter' Signed-off-by: Christian Göttsche <cgzones <AT> googlemail.com> Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org> support/genhomedircon.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/support/genhomedircon.py b/support/genhomedircon.py index e9d72067..54745730 100644 --- a/support/genhomedircon.py +++ b/support/genhomedircon.py @@ -266,7 +266,7 @@ class selinuxConfig: def genoutput(self): ret= self.heading() for h in self.getHomeDirs(): - ret += self.getHomeDirContext ("user_u" , h+'/[^/]*', "user") + ret += self.getHomeDirContext ("user_u" , h+'/[^/]+', "user") ret += self.getHomeRootContext(h) ret += self.genHomeDirContext() return ret