[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/

[Sven Vermeulen]

commit:     a1d8e9e415aaa2607c4308cad2013b08ffadd544
Author:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
AuthorDate: Mon Dec 31 22:57:50 2012 +0000
Commit:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
CommitDate: Mon Dec 31 22:57:50 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=a1d8e9e4

Support mozilla_dontaudit_use_fds and mozilla_send_dgram_plugin interfaces

---
 policy/modules/contrib/mozilla.if |   38 +++++++++++++++++++++++++++++++++++++
 1 files changed, 38 insertions(+), 0 deletions(-)

diff --git a/policy/modules/contrib/mozilla.if b/policy/modules/contrib/mozilla.if
index 99130b9..ffda45d 100644
--- a/policy/modules/contrib/mozilla.if
+++ b/policy/modules/contrib/mozilla.if
@@ -611,3 +611,41 @@ interface(`mozilla_home_filetrans_plugin_home',`
 
 	userdom_user_home_dir_filetrans($1, mozilla_plugin_home_t, $2, $3)
 ')
+
+# This is gentoo specific but cannot use ifdef distro_gentoo
+
+########################################
+## <summary>
+##	Do not audit use of mozilla file descriptors
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain to dont audit access from
+##	</summary>
+## </param>
+#
+interface(`mozilla_dontaudit_use_fds',`
+	gen_require(`
+		type mozilla_t;
+	')
+
+	dontaudit $1 mozilla_t:fd use;
+')
+
+########################################
+## <summary>
+##	Send messages to mozilla plugin unix datagram sockets
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access
+##	</summary>
+## </param>
+#
+interface(`mozilla_send_dgram_plugin',`
+	gen_require(`
+		type mozilla_plugin_t;
+	')
+
+	allow $1 mozilla_plugin_t:unix_dgram_socket sendto;
+')