fix some stuff that does not affect policy
This commit is contained in:
parent
830c12eb2d
commit
f76d07072a
@ -54,7 +54,7 @@ template(`screen_per_role_template',`
|
|||||||
type $1_screen_ro_home_t;
|
type $1_screen_ro_home_t;
|
||||||
files_type($1_screen_ro_home_t)
|
files_type($1_screen_ro_home_t)
|
||||||
|
|
||||||
type $1_screen_var_run_t;;
|
type $1_screen_var_run_t;
|
||||||
files_pid_file($1_screen_var_run_t)
|
files_pid_file($1_screen_var_run_t)
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
|
@ -326,13 +326,6 @@ template(`thunderbird_per_role_template',`
|
|||||||
# A similar thing might be necessary for mozilla compiled without GNOME
|
# A similar thing might be necessary for mozilla compiled without GNOME
|
||||||
# support (is this possible?).
|
# support (is this possible?).
|
||||||
|
|
||||||
# FIXME: Why does it try to do that?
|
|
||||||
#dontaudit $1_thunderbird_t evolution_exec_t:file { getattr execute };
|
|
||||||
|
|
||||||
# Why is thunderbird looking in .mozilla ?
|
|
||||||
# FIXME: there are legitimate uses of invoking the browser - about -> release notes
|
|
||||||
dontaudit $1_thunderbird_t $1_mozilla_home_t:dir search;
|
|
||||||
|
|
||||||
# Start links in web browser
|
# Start links in web browser
|
||||||
ifdef(`mozilla.te', `
|
ifdef(`mozilla.te', `
|
||||||
can_exec($1_thunderbird_t, shell_exec_t)
|
can_exec($1_thunderbird_t, shell_exec_t)
|
||||||
@ -345,7 +338,7 @@ template(`thunderbird_per_role_template',`
|
|||||||
gnome_file_dialog($1_thunderbird, $1)
|
gnome_file_dialog($1_thunderbird, $1)
|
||||||
allow $1_thunderbird_t $1_gnome_settings_t:file { read write };
|
allow $1_thunderbird_t $1_gnome_settings_t:file { read write };
|
||||||
')
|
')
|
||||||
optinal_policy(`dbus',`
|
optinal_policy(`
|
||||||
allow $1_t $2_dbusd_t:dbus send_msg;
|
allow $1_t $2_dbusd_t:dbus send_msg;
|
||||||
ifdef(`cups.te', `
|
ifdef(`cups.te', `
|
||||||
allow cupsd_t $1_t:dbus send_msg;
|
allow cupsd_t $1_t:dbus send_msg;
|
||||||
|
Loading…
Reference in New Issue
Block a user