Tom London avc's show thumb domain connencting back to user unix_stream_sockets

diff --git a/policy/modules/apps/thumb.if b/policy/modules/apps/thumb.if
index b78aa775141fb985e877635b53dbe0cce3440f01..f4cc7a4af9d235f196f6d09a46b77f265ec8f83d 100644 (file)
--- a/policy/modules/apps/thumb.if
+++ b/policy/modules/apps/thumb.if
@@ -75,5 +75,6 @@ interface(`thumb_role',`
 
        ps_process_pattern($2, thumb_t)
        allow $2 thumb_t:process signal;
+       allow thumb_t $2:unix_stream_socket connectto;
 ')