callers need to stream connect to mozilla plugin ( gecko media

player plugin ) #711605

diff --git a/policy/modules/apps/mozilla.if b/policy/modules/apps/mozilla.if
index 8f91e5586fc3bfbf3df830c33d7a2410fb872b0f..d0fcc879c10edbd3a7011cd093a541dac616a984 100644 (file)
--- a/policy/modules/apps/mozilla.if
+++ b/policy/modules/apps/mozilla.if
@@ -233,13 +233,14 @@ interface(`mozilla_domtrans_plugin',`
 #
 interface(`mozilla_run_plugin',`
        gen_require(`
-               type mozilla_plugin_t;
+               type mozilla_plugin_t, mozilla_plugin_tmp_t;
        ')
 
        mozilla_domtrans_plugin($1)
        role $2 types mozilla_plugin_t;
 
        allow $1 mozilla_plugin_t:unix_stream_socket { connectto rw_socket_perms };
+       allow $1 mozilla_plugin_tmp_t:sock_file write_sock_file_perms;
        allow $1 mozilla_plugin_t:fd use;
 
        allow mozilla_plugin_t $1:unix_stream_socket rw_socket_perms;