diff --git a/policy/modules/contrib/mozilla.te b/policy/modules/contrib/mozilla.te index b1bf188..65b74df 100644 --- a/policy/modules/contrib/mozilla.te +++ b/policy/modules/contrib/mozilla.te @@ -80,6 +80,10 @@ optional_policy(` pulseaudio_tmpfs_content(mozilla_tmpfs_t) ') +optional_policy(` + pulseaudio_tmpfs_content(mozilla_plugin_tmpfs_t) +') + ######################################## # # Local policy @@ -276,7 +280,8 @@ optional_policy(` ') optional_policy(` - pulseaudio_run(mozilla_t, mozilla_roles) + pulseaudio_domtrans(mozilla_t) + pulseaudio_tmpfs_content(mozilla_tmpfs_t) ') optional_policy(` @@ -505,7 +510,8 @@ optional_policy(` ') optional_policy(` - pulseaudio_run(mozilla_plugin_t, mozilla_plugin_roles) + pulseaudio_domtrans(mozilla_plugin_t) + pulseaudio_tmpfs_content(mozilla_plugin_tmpfs_t) ') optional_policy(` diff --git a/policy/modules/contrib/mplayer.te b/policy/modules/contrib/mplayer.te index 537b55e..07424e1 100644 --- a/policy/modules/contrib/mplayer.te +++ b/policy/modules/contrib/mplayer.te @@ -260,7 +260,8 @@ optional_policy(` ') optional_policy(` - pulseaudio_run(mplayer_t, mplayer_roles) + pulseaudio_domtrans(mplayer_t) + pulseaudio_tmpfs_content(mplayer_tmpfs_t) ') ifdef(`distro_gentoo',` diff --git a/policy/modules/contrib/pulseaudio.te b/policy/modules/contrib/pulseaudio.te index 09cd4ad..fe529a1 100644 --- a/policy/modules/contrib/pulseaudio.te +++ b/policy/modules/contrib/pulseaudio.te @@ -52,6 +52,8 @@ userdom_user_home_dir_filetrans(pulseaudio_t, pulseaudio_home_t, dir, ".pulse") userdom_user_home_dir_filetrans(pulseaudio_t, pulseaudio_home_t, file, ".esd_auth") userdom_user_home_dir_filetrans(pulseaudio_t, pulseaudio_home_t, file, ".pulse-cookie") +userdom_read_user_tmpfs_files(pulseaudio_t) + manage_dirs_pattern(pulseaudio_t, pulseaudio_tmp_t, pulseaudio_tmp_t) manage_files_pattern(pulseaudio_t, pulseaudio_tmp_t, pulseaudio_tmp_t) manage_sock_files_pattern(pulseaudio_t, pulseaudio_tmp_t, pulseaudio_tmp_t) @@ -203,7 +205,9 @@ allow pulseaudio_client self:unix_dgram_socket sendto; allow pulseaudio_client pulseaudio_client:process signull; -read_files_pattern(pulseaudio_client, { pulseaudio_tmpfsfile pulseaudio_tmpfs_t }, { pulseaudio_tmpfsfile pulseaudio_tmpfs_t }) +read_files_pattern(pulseaudio_t, pulseaudio_tmpfsfile, pulseaudio_tmpfsfile) +read_files_pattern(pulseaudio_client, pulseaudio_tmpfs_t, pulseaudio_tmpfs_t) +read_files_pattern(pulseaudio_client, pulseaudio_tmpfsfile, pulseaudio_tmpfsfile) delete_files_pattern(pulseaudio_client, pulseaudio_tmpfsfile, pulseaudio_tmpfsfile) fs_getattr_tmpfs(pulseaudio_client) diff --git a/policy/modules/contrib/thunderbird.te b/policy/modules/contrib/thunderbird.te index 4257ede..5e0790a 100644 --- a/policy/modules/contrib/thunderbird.te +++ b/policy/modules/contrib/thunderbird.te @@ -166,3 +166,8 @@ optional_policy(` mozilla_read_user_home_files(thunderbird_t) mozilla_domtrans(thunderbird_t) ') + +optional_policy(` + pulseaudio_domtrans(thunderbird_t) + pulseaudio_tmpfs_content(thunderbird_tmpfs_t) +')