2018-01-06 23:06:46

by Guido Trentalancia

Subject: [refpolicy] [PATCH] gnome/mozilla: allow dbus chat

Allow dbus chat between gnome (keyring daemon) and mozilla domains.

Signed-off-by: Guido Trentalancia <[email protected]>
---
policy/modules/contrib/gnome.if | 4 ++++
1 file changed, 4 insertions(+)

--- a/policy/modules/contrib/gnome.if 2018-01-06
23:51:01.108985427 +0100
+++ b/policy/modules/contrib/gnome.if 2018-01-06
23:53:39.173984781 +0100
@@ -103,6 +103,10 @@ template(`gnome_role_template',`
')

optional_policy(`
+ mozilla_dbus_chat($1_gkeyringd_t)
+ ')
+
+ optional_policy(`
wm_dbus_chat($1, $1_gkeyringd_t)
')
')

2018-01-07 22:38:57

by Chris PeBenito

Subject: [refpolicy] [PATCH] gnome/mozilla: allow dbus chat

On 01/06/2018 06:06 PM, Guido Trentalancia via refpolicy wrote:
> Allow dbus chat between gnome (keyring daemon) and mozilla domains.
>
> Signed-off-by: Guido Trentalancia <[email protected]>
> ---
> policy/modules/contrib/gnome.if | 4 ++++
> 1 file changed, 4 insertions(+)
>
> --- a/policy/modules/contrib/gnome.if 2018-01-06
> 23:51:01.108985427 +0100
> +++ b/policy/modules/contrib/gnome.if 2018-01-06
> 23:53:39.173984781 +0100
> @@ -103,6 +103,10 @@ template(`gnome_role_template',`
> ')
>
> optional_policy(`
> + mozilla_dbus_chat($1_gkeyringd_t)
> + ')
> +
> + optional_policy(`
> wm_dbus_chat($1, $1_gkeyringd_t)
> ')
> ')

It seems like this should actually be in the mozilla module, using
gnome_dbus_chat_gkeyringd(), since it's the keyring _daemon_.

--
Chris PeBenito