Gentoo Archives: gentoo-commits

From: Sven Vermeulen <swift@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/
Date: Thu, 29 May 2014 17:29:39
Message-Id: 1401384509.2d41348bbc572a365a257976002d9f5e145eefc8.swift@gentoo
1 commit: 2d41348bbc572a365a257976002d9f5e145eefc8
2 Author: Jason Zaman <jason <AT> perfinion <DOT> com>
3 AuthorDate: Thu May 29 14:53:07 2014 +0000
4 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org>
5 CommitDate: Thu May 29 17:28:29 2014 +0000
6 URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=2d41348b
7
8 Allow mozilla to send dbus messages to gconfd
9
10 Firefox throws the following error when it starts if it cannot talk to gconfd
11
12 Configuration server couldn't be contacted: D-BUS error: An SELinux
13 policy prevents this sender from sending this message to this recipient,
14 0 matched rules; type="method_call", sender=":1.120" (uid=1000 pid=26773
15 comm="/opt/firefox/firefox ") interface="org.gnome.GConf.Server"
16 member="GetDefaultDatabase" error name="(unset)" requested_reply="0"
17 destination="org.gnome.GConf" (uid=1000 pid=20128
18 comm="/usr/libexec/gconfd-2 ")
19
20 Signed-off-by: Jason Zaman <jason <AT> perfinion.com>
21
22 ---
23 policy/modules/contrib/mozilla.te | 4 ++++
24 1 file changed, 4 insertions(+)
25
26 diff --git a/policy/modules/contrib/mozilla.te b/policy/modules/contrib/mozilla.te
27 index 87728ae..6d7bac7 100644
28 --- a/policy/modules/contrib/mozilla.te
29 +++ b/policy/modules/contrib/mozilla.te
30 @@ -761,4 +761,8 @@ gen_tunable(mozilla_plugin_connect_all_unreserved, false)
31 alsa_domain(mozilla_plugin_t, mozilla_plugin_tmpfs_t)
32 ')
33 ')
34 +
35 + optional_policy(`
36 + gnome_dbus_chat_gconfd(mozilla_t)
37 + ')
38 ')