From: pebenito@ieee.org (Chris PeBenito) Date: Sat, 4 Nov 2017 14:10:45 -0400 Subject: [refpolicy] [PATCH] mozilla: read generic SSL certificates In-Reply-To: <1509823283.11280.1.camel@trentalancia.com> References: <1509823283.11280.1.camel@trentalancia.com> Message-ID: To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 11/04/2017 03:21 PM, Guido Trentalancia via refpolicy wrote: > Let mozilla read generic SSL certificates so that the browser > can verify them for HTTPS web pages. > > Signed-off-by: Guido Trentalancia > --- > policy/modules/contrib/mozilla.te | 1 + > 1 file changed, 1 insertion(+) > > --- a/policy/modules/contrib/mozilla.te 2017-09-29 19:01:55.167455647 +0200 > +++ b/policy/modules/contrib/mozilla.te 2017-11-04 20:15:58.503932463 +0100 > @@ -188,6 +188,7 @@ auth_use_nsswitch(mozilla_t) > logging_send_syslog_msg(mozilla_t) > > miscfiles_read_fonts(mozilla_t) > +miscfiles_read_generic_certs(mozilla_t) > miscfiles_read_localization(mozilla_t) > miscfiles_dontaudit_setattr_fonts_dirs(mozilla_t) > miscfiles_dontaudit_setattr_fonts_cache_dirs(mozilla_t) Merged. -- Chris PeBenito