diff --git a/policy/modules/apps/nsplugin.te b/policy/modules/apps/nsplugin.te index 7c8e23b..b4f0852 100644 --- a/policy/modules/apps/nsplugin.te +++ b/policy/modules/apps/nsplugin.te @@ -62,7 +62,7 @@ allow nsplugin_t self:shm create_shm_perms; allow nsplugin_t self:msgq create_msgq_perms; allow nsplugin_t self:unix_stream_socket { connectto create_stream_socket_perms }; allow nsplugin_t self:unix_dgram_socket create_socket_perms; -allow nsplugin_t nsplugin_rw_t:dir search_dir_perms; +allow nsplugin_t nsplugin_rw_t:dir list_dir_perms; tunable_policy(`allow_nsplugin_execmem',` allow nsplugin_t self:process { execstack execmem }; diff --git a/policy/modules/services/devicekit.te b/policy/modules/services/devicekit.te index ccacea9..b191ff7 100644 --- a/policy/modules/services/devicekit.te +++ b/policy/modules/services/devicekit.te @@ -284,6 +284,10 @@ optional_policy(` ') optional_policy(` + gnome_read_home_config(devicekit_power_t) +') + +optional_policy(` hal_domtrans_mac(devicekit_power_t) hal_manage_log(devicekit_power_t) hal_manage_pid_dirs(devicekit_power_t) @@ -303,5 +307,10 @@ optional_policy(` ') optional_policy(` + usbmuxd_stream_connect(devicekit_power_t) +') + +optional_policy(` vbetool_domtrans(devicekit_power_t) ') + diff --git a/policy/modules/services/qmail.te b/policy/modules/services/qmail.te index 355b2a2..1b01d75 100644 --- a/policy/modules/services/qmail.te +++ b/policy/modules/services/qmail.te @@ -121,6 +121,10 @@ mta_append_spool(qmail_local_t) qmail_domtrans_queue(qmail_local_t) optional_policy(` + uucp_domtrans(qmail_local_t) +') + +optional_policy(` spamassassin_domtrans_client(qmail_local_t) ') diff --git a/policy/modules/services/uucp.if b/policy/modules/services/uucp.if index a4fbe31..0e4774c 100644 --- a/policy/modules/services/uucp.if +++ b/policy/modules/services/uucp.if @@ -2,6 +2,25 @@ ######################################## ## +## Execute the uucico program in the +## uucpd_t domain. +## +## +## +## Domain allowed to transition. +## +## +# +interface(`uucp_domtrans',` + gen_require(` + type uucpd_t, uucpd_exec_t; + ') + + domtrans_pattern($1, uucpd_exec_t, uucpd_t) +') + +######################################## +## ## Allow the specified domain to append ## to uucp log files. ## diff --git a/policy/modules/system/udev.te b/policy/modules/system/udev.te index 8451600..7cc3698 100644 --- a/policy/modules/system/udev.te +++ b/policy/modules/system/udev.te @@ -295,6 +295,7 @@ optional_policy(` optional_policy(` usbmuxd_domtrans(udev_t) + usbmuxd_stream_connect(udev_t) ') optional_policy(`