Allow colord to read mislabeled icc file in the users homedir

diff --git a/policy/modules/services/colord.te b/policy/modules/services/colord.te
index e7c70b526fd3503f93926af6e5dc06de6fe11d72..16763e2b0f1fa4a45e16ad5c3676bf84d60672f6 100644 (file)
--- a/policy/modules/services/colord.te
+++ b/policy/modules/services/colord.te
@@ -100,6 +100,8 @@ optional_policy(`
 
 optional_policy(`
        gnome_read_home_icc_data_content(colord_t)
+       # Fixes lots of breakage in F16 on upgrade
+       gnome_read_generic_data_home_files(colord_t)
 ')
 
 optional_policy(`

diff --git a/policy/modules/system/authlogin.fc b/policy/modules/system/authlogin.fc
index db5441ecab48fc52f0eb7e6ce2f53926f6305c9f..c547c8486712d3c2cf310b802c011dc6e8568c99 100644 (file)
--- a/policy/modules/system/authlogin.fc
+++ b/policy/modules/system/authlogin.fc
@@ -38,6 +38,7 @@ ifdef(`distro_gentoo', `
 /var/lib/abl(/.*)?             gen_context(system_u:object_r:var_auth_t,s0)
 /var/lib/pam_ssh(/.*)?         gen_context(system_u:object_r:var_auth_t,s0)
 /var/lib/pam_shield(/.*)?      gen_context(system_u:object_r:var_auth_t,s0)
+/var/lib/google-authenticator(/.*)?    gen_context(system_u:object_r:var_auth_t,s0)
 
 /var/log/btmp.*                --      gen_context(system_u:object_r:faillog_t,s0)
 /var/log/dmesg         --      gen_context(system_u:object_r:var_log_t,s0)