From: aranea@aixah.de (Luis Ressel) Date: Fri, 14 Feb 2014 20:47:19 +0100 Subject: [refpolicy] [PATCH 1/3] Add a boolean governing mozilla plugin access to pcscd. In-Reply-To: <1392407241-18492-1-git-send-email-aranea@aixah.de> References: <1392407241-18492-1-git-send-email-aranea@aixah.de> Message-ID: <1392407241-18492-2-git-send-email-aranea@aixah.de> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com --- mozilla.te | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/mozilla.te b/mozilla.te index 11ac8e4..fe67bc9 100644 --- a/mozilla.te +++ b/mozilla.te @@ -1,4 +1,4 @@ -policy_module(mozilla, 2.8.0) +policy_module(mozilla, 2.8.1) ######################################## # @@ -13,6 +13,13 @@ policy_module(mozilla, 2.8.0) ## gen_tunable(mozilla_execstack, false) +## +##

+## Allow mozilla plugins to connect to pcscd +##

+## +gen_tunable(mozilla_connect_pcscd, false) + attribute_role mozilla_roles; attribute_role mozilla_plugin_roles; attribute_role mozilla_plugin_config_roles; @@ -556,7 +563,9 @@ optional_policy(` ') optional_policy(` - pcscd_stream_connect(mozilla_plugin_t) + tunable_policy(`mozilla_connect_pcscd',` + pcscd_stream_connect(mozilla_plugin_t) + ') ') optional_policy(` -- 1.8.5.4