diff --git a/refpolicy/policy/modules/services/bluetooth.if b/refpolicy/policy/modules/services/bluetooth.if index d61362a..d0b4322 100644 --- a/refpolicy/policy/modules/services/bluetooth.if +++ b/refpolicy/policy/modules/services/bluetooth.if @@ -1 +1,18 @@ ## Bluetooth tools and system services. + +######################################## +## +## Read bluetooth helper files. +## +## +## Domain allowed access. +## +# +interface(`bluetooth_read_helper_files',` + gen_require(` + type bluetooth_helper_t; + ') + + allow $1 bluetooth_helper_t:dir search; + allow $1 bluetooth_helper_t:file { read getattr }; +') diff --git a/refpolicy/policy/modules/services/networkmanager.te b/refpolicy/policy/modules/services/networkmanager.te index 2be3b08..afc0dbf 100644 --- a/refpolicy/policy/modules/services/networkmanager.te +++ b/refpolicy/policy/modules/services/networkmanager.te @@ -111,6 +111,10 @@ ifdef(`targeted_policy', ` files_dontaudit_read_root_file(NetworkManager_t) ') +optional_policy(`bluetooth.te',` + bluetooth_read_helper_files(NetworkManager_t) +') + optional_policy(`consoletype.te',` consoletype_exec(NetworkManager_t) ') @@ -163,6 +167,12 @@ optional_policy(`dbus.te',` allow NetworkManager_t initrc_t:dbus send_msg; allow initrc_t NetworkManager_t:dbus send_msg; + allow NetworkManager_t apmd_t:dbus send_msg; + allow apmd_t NetworkManager_t:dbus send_msg; + + allow NetworkManager_t named_t:dbus send_msg; + allow named_t NetworkManager_t:dbus send_msg; + dbus_system_bus_client_template(NetworkManager,NetworkManager_t) dbus_connect_system_bus(NetworkManager_t) dbus_send_system_bus_msg(NetworkManager_t)