commit:     74d30592c6783e80a8fab93628563cdba1536773
Author:     Jason Zaman <jason <AT> perfinion <DOT> com>
AuthorDate: Sat Aug 22 16:11:22 2015 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sat Aug 22 16:11:22 2015 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=74d30592

pulseaudio: allow clients to list user tmp dirs

/tmp/pulse-* gets created by the clients usually as user_tmp_t

bug 556526

 policy/modules/contrib/pulseaudio.te | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/policy/modules/contrib/pulseaudio.te 
b/policy/modules/contrib/pulseaudio.te
index d7f48be..ea5b2a9 100644
--- a/policy/modules/contrib/pulseaudio.te
+++ b/policy/modules/contrib/pulseaudio.te
@@ -277,4 +277,7 @@ ifdef(`distro_gentoo',`
        manage_lnk_files_pattern(pulseaudio_client, pulseaudio_xdg_config_t, 
pulseaudio_xdg_config_t)
        manage_dirs_pattern(pulseaudio_client, pulseaudio_xdg_config_t, 
pulseaudio_xdg_config_t)
        xdg_config_home_filetrans(pulseaudio_client, pulseaudio_xdg_config_t, 
dir, "pulse")
+
+       # /tmp/pulse-* gets created by the clients usually as user_tmp_t, bug 
556526
+       userdom_list_user_tmp(pulseaudio_client)
 ')

Reply via email to