From: Dan Walsh <dwalsh@redhat.com>
Date: Thu, 17 Nov 2011 17:57:40 +0000 (-0500)
Subject: Allow mozilla_plugin and nsplugin to read audio_home_t
X-Git-Tag: 000~102
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=c83e3b915540e4de435cd9deaede9cf1becb8c0c;p=people%2Fstevee%2Fselinux-policy.git

Allow mozilla_plugin and nsplugin to read audio_home_t
---

diff --git a/policy/modules/apps/mozilla.te b/policy/modules/apps/mozilla.te
index add01a5f..75d0b62c 100644
--- a/policy/modules/apps/mozilla.te
+++ b/policy/modules/apps/mozilla.te
@@ -409,6 +409,7 @@ userdom_read_user_home_content_files(mozilla_plugin_t)
 userdom_read_user_home_content_symlinks(mozilla_plugin_t)
 userdom_read_home_certs(mozilla_plugin_t)
 userdom_dontaudit_write_home_certs(mozilla_plugin_t)
+userdom_read_home_audio_files(mozilla_plugin_t)
 
 tunable_policy(`deny_execmem',`', `
 	allow mozilla_plugin_t self:process execmem;
diff --git a/policy/modules/apps/nsplugin.te b/policy/modules/apps/nsplugin.te
index cc6b5552..eeb59558 100644
--- a/policy/modules/apps/nsplugin.te
+++ b/policy/modules/apps/nsplugin.te
@@ -164,6 +164,7 @@ userdom_read_user_home_content_files(nsplugin_t)
 userdom_read_user_tmp_files(nsplugin_t)
 userdom_write_user_tmp_sockets(nsplugin_t)
 userdom_dontaudit_append_user_home_content_files(nsplugin_t)
+userdom_read_home_audio_files(nsplugin_t)
 
 optional_policy(`
 	alsa_read_rw_config(nsplugin_t)