From: guido@trentalancia.net (Guido Trentalancia) Date: Wed, 10 Aug 2016 17:30:59 +0200 Subject: [refpolicy] [PATCH] Update the accounts daemon Message-ID: <1470843059.22029.1.camel@trentalancia.net> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Update the accountsd module so that the daemon can be started (grant the permission to chat over dbus with user_t). Signed-off-by: Guido Trentalancia --- policy/modulestcontrib/accountsd.te | 7 +++++++ 1 file changed, 7 insertions(+) --- refpolicy-git-06082016-orig/policy/modules/contrib/accountsd.te 2016-08-06 21:27:11.324093995 +0200 +++ refpolicy-git-06082016/policy/modules/contrib/accountsd.te 2016-08-10 17:09:42.160969320 +0200 @@ -61,6 +61,13 @@ usermanage_domtrans_useradd(accountsd_t) usermanage_domtrans_passwd(accountsd_t) optional_policy(` + gen_require(` + type user_t; + ') + accountsd_dbus_chat(user_t) +') + +optional_policy(` consolekit_dbus_chat(accountsd_t) consolekit_read_log(accountsd_t) ')