Label /var/cache/fontconfig with "System::Shared", transmutable

Make sure that all font caches are readable by User domain. Until now
the directory was labaled with "_" and the cache files with either
"_" or "System". Files with the latter label couldn't be accessed by User
domain.

Change-Id: I2c482622ba896cede9e049734d33ac92f03b30a3
Signed-off-by: Rafal Krypa <r.krypa@samsung.com>

diff --git a/packaging/fontconfig.spec b/packaging/fontconfig.spec
index 715ec9e..2f4467b 100644 (file)
--- a/packaging/fontconfig.spec
+++ b/packaging/fontconfig.spec
@@ -14,7 +14,7 @@ BuildRequires:  gawk
 BuildRequires:  perl
 BuildRequires:  gperf
 BuildRequires:  pkgconfig(freetype2) >= %{freetype_version}
-Requires(pre):  /usr/bin/fc-cache, /usr/bin/mkdir /usr/bin/rm, /usr/bin/grep
+Requires(pre):  /usr/bin/fc-cache, /usr/bin/mkdir /usr/bin/rm, /usr/bin/grep, /usr/bin/chsmack
 
 %description
 Fontconfig is designed to locate fonts within the
@@ -75,6 +75,8 @@ mkdir -p /var/cache/fontconfig
 rm -f /var/cache/fontconfig/????????????????????????????????.cache-2
 rm -f /var/cache/fontconfig/stamp
 
+chsmack -a System::Shared -t /var/cache/fontconfig
+
 if [ -x /usr/bin/fc-cache ] && /usr/bin/fc-cache --version 2>&1 | grep -q %{version} ; then
 HOME=/root /usr/bin/fc-cache -f
 fi