From 2898a581eaf2f9a636d33e0af26aa56ae3246b51 Mon Sep 17 00:00:00 2001
From: Dan Walsh <dwalsh@redhat.com>
Date: Wed, 6 Jul 2011 16:44:16 -0400
Subject: [PATCH] Allow apps that transition to mozilla_plugin_t to use the fd

---
 policy/modules/apps/mozilla.if | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/apps/mozilla.if b/policy/modules/apps/mozilla.if
index 90c34fac..8f91e558 100644
--- a/policy/modules/apps/mozilla.if
+++ b/policy/modules/apps/mozilla.if
@@ -240,6 +240,7 @@ interface(`mozilla_run_plugin',`
 	role $2 types mozilla_plugin_t;
 
 	allow $1 mozilla_plugin_t:unix_stream_socket { connectto rw_socket_perms };
+	allow $1 mozilla_plugin_t:fd use;
 
 	allow mozilla_plugin_t $1:unix_stream_socket rw_socket_perms;
 ')
-- 
2.47.2