Revert: ea889ac720a4fddde6d8376cb5dc9336d14e867e

mozilla_plugin_tmp_t is userdom_user_tmp_content() and so callers have
full access to it.

diff --git a/policy/modules/apps/mozilla.if b/policy/modules/apps/mozilla.if
index d0fcc879c10edbd3a7011cd093a541dac616a984..8f91e5586fc3bfbf3df830c33d7a2410fb872b0f 100644 (file)
--- a/policy/modules/apps/mozilla.if
+++ b/policy/modules/apps/mozilla.if
@@ -233,14 +233,13 @@ interface(`mozilla_domtrans_plugin',`
 #
 interface(`mozilla_run_plugin',`
        gen_require(`
-               type mozilla_plugin_t, mozilla_plugin_tmp_t;
+               type mozilla_plugin_t;
        ')
 
        mozilla_domtrans_plugin($1)
        role $2 types mozilla_plugin_t;
 
        allow $1 mozilla_plugin_t:unix_stream_socket { connectto rw_socket_perms };
-       allow $1 mozilla_plugin_tmp_t:sock_file write_sock_file_perms;
        allow $1 mozilla_plugin_t:fd use;
 
        allow mozilla_plugin_t $1:unix_stream_socket rw_socket_perms;