[patch] gconf dbus policy addition

gnome_gconfd_dbus.patch (text/plain), 1.59 KB, created by Jason Zaman on 2014-05-20 15:14:34 UTC

diff --git a/policy/modules/contrib/gnome.if b/policy/modules/contrib/gnome.if
index 118ee01..246e0ed 100644
--- a/policy/modules/contrib/gnome.if
+++ b/policy/modules/contrib/gnome.if
@@ -115,6 +115,12 @@ template(`gnome_role_template',`
 			gnome_dbus_chat_gkeyringd($1, $3)
 		')
 	')
+
+	ifdef(`gentoo_policy',`
+		optional_policy(`
+			gnome_dbus_chat_gconfd($1, $3)
+		')
+	')
 ')
 
 ########################################
@@ -604,6 +610,54 @@ interface(`gnome_gconf_home_filetrans',`
 
 ########################################
 ## <summary>
+##	Send and receive messages from
+##	gconf daemon over dbus.
+## </summary>
+## <param name="role_prefix">
+##	<summary>
+##	The prefix of the user domain (e.g., user
+##	is the prefix for user_t).
+##	</summary>
+## </param>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`gnome_dbus_chat_gconfd',`
+	gen_require(`
+		type $1_gconfd_t;
+		class dbus send_msg;
+	')
+
+	allow $2 $1_gconfd_t:dbus send_msg;
+	allow $1_gconfd_t $2:dbus send_msg;
+')
+
+########################################
+## <summary>
+##	Send and receive messages from all
+##	gconf daemon over dbus.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`gnome_dbus_chat_all_gconfd',`
+	gen_require(`
+		type gconfd_t;
+		class dbus send_msg;
+	')
+
+	allow $1 gconfd_t:dbus send_msg;
+	allow gconfd_t $1:dbus send_msg;
+')
+
+########################################
+## <summary>
 ##	Read generic gnome keyring home files.
 ## </summary>
 ## <param name="domain">