commit: c90a72dc34e6db9bd4f0c6b727491abebde69bbc Author: Chris PeBenito <pebenito <AT> ieee <DOT> org> AuthorDate: Sun Aug 14 18:12:50 2016 +0000 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> CommitDate: Wed Aug 17 16:22:44 2016 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=c90a72dc
Allow the system user domains to chat over dbus with a few other domains (e.g. gnome session). Thanks to Jason Zaman for pointing out the correct interface to achieve this. This new version fixes a typographic error in the previous version. Signed-off-by: Guido Trentalancia <guido <AT> trentalancia.net> policy/modules/system/userdomain.if | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if index 9c40ce1..f0b4778 100644 --- a/policy/modules/system/userdomain.if +++ b/policy/modules/system/userdomain.if @@ -620,10 +620,18 @@ template(`userdom_common_user_template',` dbus_system_bus_client($1_t) optional_policy(` + accountsd_dbus_chat($1_t) + ') + + optional_policy(` bluetooth_dbus_chat($1_t) ') optional_policy(` + colord_dbus_chat($1_t) + ') + + optional_policy(` consolekit_dbus_chat($1_t) ') @@ -632,6 +640,11 @@ template(`userdom_common_user_template',` ') optional_policy(` + devicekit_dbus_chat_disk($1_t) + devicekit_dbus_chat_power($1_t) + ') + + optional_policy(` hal_dbus_chat($1_t) ') @@ -642,6 +655,14 @@ template(`userdom_common_user_template',` optional_policy(` policykit_dbus_chat($1_t) ') + + optional_policy(` + rtkit_daemon_dbus_chat($1_t) + ') + + optional_policy(` + xdm_dbus_chat($1_t) + ') ') optional_policy(`