From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Tue, 23 Aug 2011 15:44:56 +0200 Subject: [refpolicy] [PATCH 09/11] Support GnuPG integration in Portage In-Reply-To: <20110823133643.GA857@siphos.be> References: <20110823133643.GA857@siphos.be> Message-ID: <20110823134456.GJ857@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com To support GnuPG integration in Portage (such as validating the signature of snapshots), we need to add portage_search_conf_dirs rights (have GnuPG find its keys in /etc/portage/gnupg) and portage_read_tmp_files (where the snapshot will be stored and later extracted). Signed-off-by: Sven Vermeulen --- policy/modules/apps/gpg.te | 5 +++++ 1 files changed, 5 insertions(+), 0 deletions(-) diff --git a/policy/modules/apps/gpg.te b/policy/modules/apps/gpg.te index 9050e8c..bde06f6 100644 --- a/policy/modules/apps/gpg.te +++ b/policy/modules/apps/gpg.te @@ -147,6 +147,11 @@ optional_policy(` ') optional_policy(` + portage_search_conf_dirs(gpg_t) + portage_read_tmp_files(gpg_t) +') + +optional_policy(` xserver_use_xdm_fds(gpg_t) xserver_rw_xdm_pipes(gpg_t) ') -- 1.7.3.4