commit: c90a72dc34e6db9bd4f0c6b727491abebde69bbc
Author: Chris PeBenito <pebenito <AT> ieee <DOT> org>
AuthorDate: Sun Aug 14 18:12:50 2016 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Wed Aug 17 16:22:44 2016 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=c90a72dc
Allow the system user domains to chat over dbus with a few other domains (e.g.
gnome session).
Thanks to Jason Zaman for pointing out the correct interface to
achieve this.
This new version fixes a typographic error in the previous version.
Signed-off-by: Guido Trentalancia <guido <AT> trentalancia.net>
policy/modules/system/userdomain.if | 21 +++++++++++++++++++++
1 file changed, 21 insertions(+)
diff --git a/policy/modules/system/userdomain.if
b/policy/modules/system/userdomain.if
index 9c40ce1..f0b4778 100644
--- a/policy/modules/system/userdomain.if
+++ b/policy/modules/system/userdomain.if
@@ -620,10 +620,18 @@ template(`userdom_common_user_template',`
dbus_system_bus_client($1_t)
optional_policy(`
+ accountsd_dbus_chat($1_t)
+ ')
+
+ optional_policy(`
bluetooth_dbus_chat($1_t)
')
optional_policy(`
+ colord_dbus_chat($1_t)
+ ')
+
+ optional_policy(`
consolekit_dbus_chat($1_t)
')
@@ -632,6 +640,11 @@ template(`userdom_common_user_template',`
')
optional_policy(`
+ devicekit_dbus_chat_disk($1_t)
+ devicekit_dbus_chat_power($1_t)
+ ')
+
+ optional_policy(`
hal_dbus_chat($1_t)
')
@@ -642,6 +655,14 @@ template(`userdom_common_user_template',`
optional_policy(`
policykit_dbus_chat($1_t)
')
+
+ optional_policy(`
+ rtkit_daemon_dbus_chat($1_t)
+ ')
+
+ optional_policy(`
+ xdm_dbus_chat($1_t)
+ ')
')
optional_policy(`
