From: guido@trentalancia.com (Guido Trentalancia) Date: Sat, 04 Nov 2017 20:21:23 +0100 Subject: [refpolicy] [PATCH] mozilla: read generic SSL certificates Message-ID: <1509823283.11280.1.camel@trentalancia.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Let mozilla read generic SSL certificates so that the browser can verify them for HTTPS web pages. Signed-off-by: Guido Trentalancia --- policy/modules/contrib/mozilla.te | 1 + 1 file changed, 1 insertion(+) --- a/policy/modules/contrib/mozilla.te 2017-09-29 19:01:55.167455647 +0200 +++ b/policy/modules/contrib/mozilla.te 2017-11-04 20:15:58.503932463 +0100 @@ -188,6 +188,7 @@ auth_use_nsswitch(mozilla_t) logging_send_syslog_msg(mozilla_t) miscfiles_read_fonts(mozilla_t) +miscfiles_read_generic_certs(mozilla_t) miscfiles_read_localization(mozilla_t) miscfiles_dontaudit_setattr_fonts_dirs(mozilla_t) miscfiles_dontaudit_setattr_fonts_cache_dirs(mozilla_t)