From: guido@trentalancia.net (Guido Trentalancia) Date: Thu, 01 Sep 2016 19:25:08 +0200 Subject: [refpolicy] [PATCH] evolution: read SSL certificates Message-ID: <1472750708.10496.1.camel@trentalancia.net> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Update the evolution modules so that: - it is able to read SSL certificates (e.g. for server authentication); - it is able to read the random number generator device; - it doesn't audit attempts to get the attributes of extended attributes filesystems. Signed-off-by: Guido Trentalancia --- policy/modules/contrib/evolution.te | 3 +++ 1 file changed, 3 insertions(+) --- refpolicy-git-06082016-orig/policy/modules/contrib/evolution.te 2016-08-06 21:27:11.350094292 +0200 +++ refpolicy-git-06082016/policy/modules/contrib/evolution.te 2016-09-01 19:06:20.670788536 +0200 @@ -164,18 +164,21 @@ corenet_tcp_connect_ldap_port(evolution_ corenet_sendrecv_ipp_client_packets(evolution_t) corenet_tcp_connect_ipp_port(evolution_t) +dev_read_rand(evolution_t) dev_read_urand(evolution_t) domain_dontaudit_read_all_domains_state(evolution_t) files_read_usr_files(evolution_t) +fs_dontaudit_getattr_xattr_fs(evolution_t) fs_search_auto_mountpoints(evolution_t) auth_use_nsswitch(evolution_t) logging_send_syslog_msg(evolution_t) +miscfiles_read_generic_certs(evolution_t) miscfiles_read_localization(evolution_t) udev_read_state(evolution_t)