2016-12-07 16:49:53

by guido

Subject: [refpolicy] [PATCH] mozilla: extend dbus connection permissions

Allow dbus_connect_all_session_bus() not only from the
mozilla_plugin_t domain but also from the mozilla_t domain.

This is currently required by the epiphany web browser.

Signed-off-by: Guido Trentalancia <[email protected]>
---
policy/modules/contrib/mozilla.te | 1 +
1 file changed, 1 insertion(+)

--- refpolicy-git-07122016/policy/modules/contrib/mozilla.te 2016-12-07 13:53:36.324290117 +0100
+++ refpolicy-git-06082016/policy/modules/contrib/mozilla.te 2016-12-07 17:27:00.010583072 +0100
@@ -253,6 +287,7 @@ optional_policy(`

optional_policy(`
dbus_all_session_bus_client(mozilla_t)
+ dbus_connect_all_session_bus(mozilla_t)
dbus_system_bus_client(mozilla_t)

optional_policy(`

2016-12-08 23:46:52

by Chris PeBenito

Subject: [refpolicy] [PATCH] mozilla: extend dbus connection permissions

On 12/07/16 11:49, Guido Trentalancia via refpolicy wrote:
> Allow dbus_connect_all_session_bus() not only from the
> mozilla_plugin_t domain but also from the mozilla_t domain.
>
> This is currently required by the epiphany web browser.
>
> Signed-off-by: Guido Trentalancia <[email protected]>
> ---
> policy/modules/contrib/mozilla.te | 1 +
> 1 file changed, 1 insertion(+)
>
> --- refpolicy-git-07122016/policy/modules/contrib/mozilla.te 2016-12-07 13:53:36.324290117 +0100
> +++ refpolicy-git-06082016/policy/modules/contrib/mozilla.te 2016-12-07 17:27:00.010583072 +0100
> @@ -253,6 +287,7 @@ optional_policy(`
>
> optional_policy(`
> dbus_all_session_bus_client(mozilla_t)
> + dbus_connect_all_session_bus(mozilla_t)
> dbus_system_bus_client(mozilla_t)
>
> optional_policy(`

Merged.

--
Chris PeBenito