The dbus daemon for fprintd reads the cmdline of the program it is chatting with

diff --git a/policy/modules/services/fprintd.if b/policy/modules/services/fprintd.if
index c02062c7bb9219e5584b068fc1e1e8e11db997f0..eeddf7b97536f3b33ec0e655bbbf0b97aa0fdbd9 100644 (file)
--- a/policy/modules/services/fprintd.if
+++ b/policy/modules/services/fprintd.if
@@ -37,4 +37,5 @@ interface(`fprintd_dbus_chat',`
 
        allow $1 fprintd_t:dbus send_msg;
        allow fprintd_t $1:dbus send_msg;
+       allow fprintd_t $1:file read;
 ')