From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Sun, 4 Sep 2011 14:14:37 +0200 Subject: [refpolicy] [PATCH/RFC 4/4] Allow mozilla to read xdg data In-Reply-To: <20110904121223.GA11390@siphos.be> References: <20110904121223.GA11390@siphos.be> Message-ID: <20110904121436.GE11390@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Mozilla (firefox) reads in xdg data, for instance for the MIME handling (associating MIME types with applications) as mentioned in ~/.local/share/applications Signed-off-by: Sven Vermeulen --- policy/modules/apps/mozilla.te | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) diff --git a/policy/modules/apps/mozilla.te b/policy/modules/apps/mozilla.te index 1039ff2..5083594 100644 --- a/policy/modules/apps/mozilla.te +++ b/policy/modules/apps/mozilla.te @@ -167,6 +167,8 @@ sysnet_dns_name_resolve(mozilla_t) userdom_use_user_ptys(mozilla_t) +xdg_read_data_home(mozilla_t) + xserver_user_x_domain_template(mozilla, mozilla_t, mozilla_tmpfs_t) xserver_dontaudit_read_xdm_tmp_files(mozilla_t) xserver_dontaudit_getattr_xdm_tmp_sockets(mozilla_t) -- 1.7.3.4