[patch] pulseaudio_dev_shm.patch

pulseaudio_dev_shm.patch (text/plain), 3.04 KB, created by vespian on 2013-03-24 19:13:36 UTC

diff --git a/policy/modules/contrib/mozilla.te b/policy/modules/contrib/mozilla.te
index b1bf188..65b74df 100644
--- a/policy/modules/contrib/mozilla.te
+++ b/policy/modules/contrib/mozilla.te
@@ -80,6 +80,10 @@ optional_policy(`
 	pulseaudio_tmpfs_content(mozilla_tmpfs_t)
 ')
 
+optional_policy(`
+	pulseaudio_tmpfs_content(mozilla_plugin_tmpfs_t)
+')
+
 ########################################
 #
 # Local policy
@@ -276,7 +280,8 @@ optional_policy(`
 ')
 
 optional_policy(`
-	pulseaudio_run(mozilla_t, mozilla_roles)
+    pulseaudio_domtrans(mozilla_t)
+    pulseaudio_tmpfs_content(mozilla_tmpfs_t)
 ')
 
 optional_policy(`
@@ -505,7 +510,8 @@ optional_policy(`
 ')
 
 optional_policy(`
-	pulseaudio_run(mozilla_plugin_t, mozilla_plugin_roles)
+    pulseaudio_domtrans(mozilla_plugin_t)
+    pulseaudio_tmpfs_content(mozilla_plugin_tmpfs_t)
 ')
 
 optional_policy(`
diff --git a/policy/modules/contrib/mplayer.te b/policy/modules/contrib/mplayer.te
index 537b55e..07424e1 100644
--- a/policy/modules/contrib/mplayer.te
+++ b/policy/modules/contrib/mplayer.te
@@ -260,7 +260,8 @@ optional_policy(`
 ')
 
 optional_policy(`
-	pulseaudio_run(mplayer_t, mplayer_roles)
+    pulseaudio_domtrans(mplayer_t)
+    pulseaudio_tmpfs_content(mplayer_tmpfs_t)
 ')
 
 ifdef(`distro_gentoo',`
diff --git a/policy/modules/contrib/pulseaudio.te b/policy/modules/contrib/pulseaudio.te
index 09cd4ad..fe529a1 100644
--- a/policy/modules/contrib/pulseaudio.te
+++ b/policy/modules/contrib/pulseaudio.te
@@ -52,6 +52,8 @@ userdom_user_home_dir_filetrans(pulseaudio_t, pulseaudio_home_t, dir, ".pulse")
 userdom_user_home_dir_filetrans(pulseaudio_t, pulseaudio_home_t, file, ".esd_auth")
 userdom_user_home_dir_filetrans(pulseaudio_t, pulseaudio_home_t, file, ".pulse-cookie")
 
+userdom_read_user_tmpfs_files(pulseaudio_t)
+
 manage_dirs_pattern(pulseaudio_t, pulseaudio_tmp_t, pulseaudio_tmp_t)
 manage_files_pattern(pulseaudio_t, pulseaudio_tmp_t, pulseaudio_tmp_t)
 manage_sock_files_pattern(pulseaudio_t, pulseaudio_tmp_t, pulseaudio_tmp_t)
@@ -203,7 +205,9 @@ allow pulseaudio_client self:unix_dgram_socket sendto;
 
 allow pulseaudio_client pulseaudio_client:process signull;
 
-read_files_pattern(pulseaudio_client, { pulseaudio_tmpfsfile pulseaudio_tmpfs_t }, { pulseaudio_tmpfsfile pulseaudio_tmpfs_t })
+read_files_pattern(pulseaudio_t, pulseaudio_tmpfsfile, pulseaudio_tmpfsfile)
+read_files_pattern(pulseaudio_client, pulseaudio_tmpfs_t, pulseaudio_tmpfs_t)
+read_files_pattern(pulseaudio_client, pulseaudio_tmpfsfile, pulseaudio_tmpfsfile)
 delete_files_pattern(pulseaudio_client, pulseaudio_tmpfsfile, pulseaudio_tmpfsfile)
 
 fs_getattr_tmpfs(pulseaudio_client)
diff --git a/policy/modules/contrib/thunderbird.te b/policy/modules/contrib/thunderbird.te
index 4257ede..5e0790a 100644
--- a/policy/modules/contrib/thunderbird.te
+++ b/policy/modules/contrib/thunderbird.te
@@ -166,3 +166,8 @@ optional_policy(`
 	mozilla_read_user_home_files(thunderbird_t)
 	mozilla_domtrans(thunderbird_t)
 ')
+
+optional_policy(`
+    pulseaudio_domtrans(thunderbird_t)
+    pulseaudio_tmpfs_content(thunderbird_tmpfs_t)
+')