In my Fedora 10 system, all fonts under /usr/share/fonts
are of the fonts_t type, while the fontconfig files under /etc/fonts
are of the default etc_t type. I think it would make sense to move
the whole /etc/fonts directory under the fonts_t type, so that user
can easily say "this domain can use fonts" and be done without allowing
the domain to read the whole /etc directory and files.
What do you think about it? Does it make sense to modify the default
Fedora policy according to these lines?
-Yenya
--
| Jan "Yenya" Kasprzak <kas at {fi.muni.cz - work |
yenya.net - private}>
|
| GPG: ID 1024/D3498839 Fingerprint 0D99A7FB206605D7 8B35FCDE05B18A5E |
|
http://www.fi.muni.cz/~kas/ Journal:
http://www.fi.muni.cz/~kas/blog/ |
> If you find yourself arguing with Alan Cox, you’re _probably_
wrong. <<
> --James Morris in "How and Why You Should Become a Kernel Hacker"
<<