diff --git a/policy/modules/services/consolekit.te b/policy/modules/services/consolekit.te index abb4b9d..3313441 100644 --- a/policy/modules/services/consolekit.te +++ b/policy/modules/services/consolekit.te @@ -1,5 +1,5 @@ -policy_module(consolekit, 1.4.1) +policy_module(consolekit, 1.4.2) ######################################## # @@ -11,7 +11,7 @@ type consolekit_exec_t; init_daemon_domain(consolekit_t, consolekit_exec_t) type consolekit_log_t; -files_pid_file(consolekit_log_t) +logging_log_file(consolekit_log_t) type consolekit_var_run_t; files_pid_file(consolekit_var_run_t) @@ -50,6 +50,7 @@ files_read_etc_files(consolekit_t) files_read_usr_files(consolekit_t) # needs to read /var/lib/dbus/machine-id files_read_var_lib_files(consolekit_t) +files_search_all_mountpoints(consolekit_t) fs_list_inotifyfs(consolekit_t) @@ -63,10 +64,12 @@ init_telinit(consolekit_t) init_rw_utmp(consolekit_t) logging_send_syslog_msg(consolekit_t) +logging_send_audit_msgs(consolekit_t) miscfiles_read_localization(consolekit_t) userdom_dontaudit_read_user_home_content_files(consolekit_t) +userdom_read_user_tmp_files(consolekit_t) hal_ptrace(consolekit_t) @@ -81,7 +84,7 @@ tunable_policy(`use_samba_home_dirs',` ') optional_policy(` - dbus_system_bus_client(consolekit_t) + dbus_system_domain(consolekit_t, consolekit_exec_t) optional_policy(` hal_dbus_chat(consolekit_t) @@ -97,8 +100,15 @@ optional_policy(` ') optional_policy(` + policykit_domtrans_auth(consolekit_t) + policykit_read_lib(consolekit_t) + policykit_read_reload(consolekit_t) +') + +optional_policy(` + xserver_read_xdm_pid(consolekit_t) xserver_read_user_xauth(consolekit_t) - xserver_stream_connect(consolekit_t) + corenet_tcp_connect_xserver_port(consolekit_t) ') optional_policy(`