commit: 2d41348bbc572a365a257976002d9f5e145eefc8
Author: Jason Zaman <jason <AT> perfinion <DOT> com>
AuthorDate: Thu May 29 14:53:07 2014 +0000
Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Thu May 29 17:28:29 2014 +0000
URL:
http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=2d41348b
Allow mozilla to send dbus messages to gconfd
Firefox throws the following error when it starts if it cannot talk to gconfd
Configuration server couldn't be contacted: D-BUS error: An SELinux
policy prevents this sender from sending this message to this recipient,
0 matched rules; type="method_call", sender=":1.120" (uid=1000 pid=26773
comm="/opt/firefox/firefox ") interface="org.gnome.GConf.Server"
member="GetDefaultDatabase" error name="(unset)" requested_reply="0"
destination="org.gnome.GConf" (uid=1000 pid=20128
comm="/usr/libexec/gconfd-2 ")
Signed-off-by: Jason Zaman <jason <AT> perfinion.com>
---
policy/modules/contrib/mozilla.te | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/policy/modules/contrib/mozilla.te
b/policy/modules/contrib/mozilla.te
index 87728ae..6d7bac7 100644
--- a/policy/modules/contrib/mozilla.te
+++ b/policy/modules/contrib/mozilla.te
@@ -761,4 +761,8 @@ gen_tunable(mozilla_plugin_connect_all_unreserved, false)
alsa_domain(mozilla_plugin_t, mozilla_plugin_tmpfs_t)
')
')
+
+ optional_policy(`
+ gnome_dbus_chat_gconfd(mozilla_t)
+ ')
')
