From: Dan Walsh Date: Tue, 29 Nov 2011 03:15:57 +0000 (-0500) Subject: The dbus daemon for fprintd reads the cmdline of the program it is chatting with X-Git-Tag: 000~68 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b3392c8e5ed77eecff4bfd3d53e66ca7b5a9f41c;p=people%2Fstevee%2Fselinux-policy.git The dbus daemon for fprintd reads the cmdline of the program it is chatting with --- diff --git a/policy/modules/services/fprintd.if b/policy/modules/services/fprintd.if index c02062c7..eeddf7b9 100644 --- a/policy/modules/services/fprintd.if +++ b/policy/modules/services/fprintd.if @@ -37,4 +37,5 @@ interface(`fprintd_dbus_chat',` allow $1 fprintd_t:dbus send_msg; allow fprintd_t $1:dbus send_msg; + allow fprintd_t $1:file read; ')