Allow mozilla_plugin and nsplugin to read audio_home_t

diff --git a/policy/modules/apps/mozilla.te b/policy/modules/apps/mozilla.te
index add01a5fda6d8af5147f13f34eb5b8ae442c3a7f..75d0b62c295b30eb71fff9291f5f5e16b96d90fb 100644 (file)
--- a/policy/modules/apps/mozilla.te
+++ b/policy/modules/apps/mozilla.te
@@ -409,6 +409,7 @@ userdom_read_user_home_content_files(mozilla_plugin_t)
 userdom_read_user_home_content_symlinks(mozilla_plugin_t)
 userdom_read_home_certs(mozilla_plugin_t)
 userdom_dontaudit_write_home_certs(mozilla_plugin_t)
+userdom_read_home_audio_files(mozilla_plugin_t)
 
 tunable_policy(`deny_execmem',`', `
        allow mozilla_plugin_t self:process execmem;

diff --git a/policy/modules/apps/nsplugin.te b/policy/modules/apps/nsplugin.te
index cc6b555234a049433d48121923db39f3f5a74217..eeb5955827f7107901be07970be9f4a406899f4f 100644 (file)
--- a/policy/modules/apps/nsplugin.te
+++ b/policy/modules/apps/nsplugin.te
@@ -164,6 +164,7 @@ userdom_read_user_home_content_files(nsplugin_t)
 userdom_read_user_tmp_files(nsplugin_t)
 userdom_write_user_tmp_sockets(nsplugin_t)
 userdom_dontaudit_append_user_home_content_files(nsplugin_t)
+userdom_read_home_audio_files(nsplugin_t)
 
 optional_policy(`
        alsa_read_rw_config(nsplugin_t)