From: Dan Walsh <dwalsh@redhat.com>
Date: Wed, 6 Jul 2011 20:44:16 +0000 (-0400)
Subject: Allow apps that transition to mozilla_plugin_t to use the fd
X-Git-Tag: 000~736
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=2898a581eaf2f9a636d33e0af26aa56ae3246b51;p=people%2Fstevee%2Fselinux-policy.git

Allow apps that transition to mozilla_plugin_t to use the fd
---

diff --git a/policy/modules/apps/mozilla.if b/policy/modules/apps/mozilla.if
index 90c34fac..8f91e558 100644
--- a/policy/modules/apps/mozilla.if
+++ b/policy/modules/apps/mozilla.if
@@ -240,6 +240,7 @@ interface(`mozilla_run_plugin',`
 	role $2 types mozilla_plugin_t;
 
 	allow $1 mozilla_plugin_t:unix_stream_socket { connectto rw_socket_perms };
+	allow $1 mozilla_plugin_t:fd use;
 
 	allow mozilla_plugin_t $1:unix_stream_socket rw_socket_perms;
 ')