From: pebenito@ieee.org (Chris PeBenito) Date: Sun, 7 Jan 2018 17:38:57 -0500 Subject: [refpolicy] [PATCH] gnome/mozilla: allow dbus chat In-Reply-To: <1515280006.9967.0.camel@trentalancia.com> References: <1515280006.9967.0.camel@trentalancia.com> Message-ID: To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 01/06/2018 06:06 PM, Guido Trentalancia via refpolicy wrote: > Allow dbus chat between gnome (keyring daemon) and mozilla domains. > > Signed-off-by: Guido Trentalancia > --- > policy/modules/contrib/gnome.if | 4 ++++ > 1 file changed, 4 insertions(+) > > --- a/policy/modules/contrib/gnome.if 2018-01-06 > 23:51:01.108985427 +0100 > +++ b/policy/modules/contrib/gnome.if 2018-01-06 > 23:53:39.173984781 +0100 > @@ -103,6 +103,10 @@ template(`gnome_role_template',` > ') > > optional_policy(` > + mozilla_dbus_chat($1_gkeyringd_t) > + ') > + > + optional_policy(` > wm_dbus_chat($1, $1_gkeyringd_t) > ') > ') It seems like this should actually be in the mozilla module, using gnome_dbus_chat_gkeyringd(), since it's the keyring _daemon_. -- Chris PeBenito