Allow apps that transition to mozilla_plugin_t to use the fd

diff --git a/policy/modules/apps/mozilla.if b/policy/modules/apps/mozilla.if
index 90c34face7898cb60b6535583436e24f40beb021..8f91e5586fc3bfbf3df830c33d7a2410fb872b0f 100644 (file)
--- a/policy/modules/apps/mozilla.if
+++ b/policy/modules/apps/mozilla.if
@@ -240,6 +240,7 @@ interface(`mozilla_run_plugin',`
        role $2 types mozilla_plugin_t;
 
        allow $1 mozilla_plugin_t:unix_stream_socket { connectto rw_socket_perms };
+       allow $1 mozilla_plugin_t:fd use;
 
        allow mozilla_plugin_t $1:unix_stream_socket rw_socket_perms;
 ')