From 065f71763eb91970f0f3af9956e7a0008181821c Mon Sep 17 00:00:00 2001 From: Dominick Grift Date: Thu, 7 Jul 2011 00:15:53 +0200 Subject: [PATCH] Revert: ea889ac720a4fddde6d8376cb5dc9336d14e867e mozilla_plugin_tmp_t is userdom_user_tmp_content() and so callers have full access to it. --- policy/modules/apps/mozilla.if | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/policy/modules/apps/mozilla.if b/policy/modules/apps/mozilla.if index d0fcc879..8f91e558 100644 --- a/policy/modules/apps/mozilla.if +++ b/policy/modules/apps/mozilla.if @@ -233,14 +233,13 @@ interface(`mozilla_domtrans_plugin',` # interface(`mozilla_run_plugin',` gen_require(` - type mozilla_plugin_t, mozilla_plugin_tmp_t; + type mozilla_plugin_t; ') mozilla_domtrans_plugin($1) role $2 types mozilla_plugin_t; allow $1 mozilla_plugin_t:unix_stream_socket { connectto rw_socket_perms }; - allow $1 mozilla_plugin_tmp_t:sock_file write_sock_file_perms; allow $1 mozilla_plugin_t:fd use; allow mozilla_plugin_t $1:unix_stream_socket rw_socket_perms; -- 2.47.2