rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Mozilla patch from Dan Walsh.

Browse Source 
Various old fixes for mozilla.
This commit is contained in:
Chris PeBenito 2010-06-21 09:36:39 -04:00
parent ae1b7dedd7
commit 3c1e8ff6bb
3 changed files with 28 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
policy/modules/apps/mozilla.fc
View File

@ -11,6 +11,7 @@ HOME_DIR/\.phoenix(/.*)? gen_context(system_u:object_r:mozilla_home_t,s0)
/usr/bin/mozilla -- gen_context(system_u:object_r:mozilla_exec_t,s0) /usr/bin/mozilla -- gen_context(system_u:object_r:mozilla_exec_t,s0)
/usr/bin/mozilla-snapshot -- gen_context(system_u:object_r:mozilla_exec_t,s0) /usr/bin/mozilla-snapshot -- gen_context(system_u:object_r:mozilla_exec_t,s0)
/usr/bin/epiphany-bin -- gen_context(system_u:object_r:mozilla_exec_t,s0) /usr/bin/epiphany-bin -- gen_context(system_u:object_r:mozilla_exec_t,s0)
/usr/bin/epiphany -- gen_context(system_u:object_r:mozilla_exec_t,s0)
/usr/bin/mozilla-[0-9].* -- gen_context(system_u:object_r:mozilla_exec_t,s0) /usr/bin/mozilla-[0-9].* -- gen_context(system_u:object_r:mozilla_exec_t,s0)
/usr/bin/mozilla-bin-[0-9].* -- gen_context(system_u:object_r:mozilla_exec_t,s0) /usr/bin/mozilla-bin-[0-9].* -- gen_context(system_u:object_r:mozilla_exec_t,s0)

18
policy/modules/apps/mozilla.if
View File

@ -130,6 +130,24 @@ interface(`mozilla_dontaudit_manage_user_home_files',`
dontaudit $1 mozilla_home_t:file manage_file_perms; dontaudit $1 mozilla_home_t:file manage_file_perms;
') ')
########################################
## <summary>
## Execmod mozilla home directory content.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`mozilla_execmod_user_home_files',`
gen_require(`
type mozilla_home_t;
')
allow $1 mozilla_home_t:file execmod;
')
######################################## ########################################
## <summary> ## <summary>
## Run mozilla in the mozilla domain. ## Run mozilla in the mozilla domain.

16
policy/modules/apps/mozilla.te
View File

@ -1,4 +1,4 @@
policy_module(mozilla, 2.2.0) policy_module(mozilla, 2.2.1)
######################################## ########################################
# #
@ -137,16 +137,12 @@ logging_send_syslog_msg(mozilla_t)
miscfiles_read_fonts(mozilla_t) miscfiles_read_fonts(mozilla_t)
miscfiles_read_localization(mozilla_t) miscfiles_read_localization(mozilla_t)
miscfiles_dontaudit_setattr_fonts_dirs(mozilla_t)
# Browse the web, connect to printer # Browse the web, connect to printer
sysnet_dns_name_resolve(mozilla_t) sysnet_dns_name_resolve(mozilla_t)
userdom_manage_user_home_content_dirs(mozilla_t) userdom_use_user_ptys(mozilla_t)
userdom_manage_user_home_content_files(mozilla_t)
userdom_manage_user_home_content_symlinks(mozilla_t)
userdom_manage_user_tmp_dirs(mozilla_t)
userdom_manage_user_tmp_files(mozilla_t)
userdom_manage_user_tmp_sockets(mozilla_t)
xserver_user_x_domain_template(mozilla, mozilla_t, mozilla_tmpfs_t) xserver_user_x_domain_template(mozilla, mozilla_t, mozilla_tmpfs_t)
xserver_dontaudit_read_xdm_tmp_files(mozilla_t) xserver_dontaudit_read_xdm_tmp_files(mozilla_t)
@ -262,6 +258,12 @@ optional_policy(`
nscd_socket_use(mozilla_t) nscd_socket_use(mozilla_t)
') ')
optional_policy(`
pulseaudio_exec(mozilla_t)
pulseaudio_stream_connect(mozilla_t)
pulseaudio_manage_home_files(mozilla_t)
')
optional_policy(` optional_policy(`
thunderbird_domtrans(mozilla_t) thunderbird_domtrans(mozilla_t)
') ')