From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 79AEE138010 for ; Wed, 10 Oct 2012 19:53:24 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id E23C0E04C7; Wed, 10 Oct 2012 19:52:16 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id 33B9B21C030 for ; Wed, 10 Oct 2012 19:52:16 +0000 (UTC) Received: from hornbill.gentoo.org (hornbill.gentoo.org [94.100.119.163]) (using TLSv1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 84B8C33D7FB for ; Wed, 10 Oct 2012 19:52:15 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by hornbill.gentoo.org (Postfix) with ESMTP id 339CDE5446 for ; Wed, 10 Oct 2012 19:52:14 +0000 (UTC) From: "Sven Vermeulen" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Sven Vermeulen" Message-ID: <1349898564.9901590e892d90040704d52f44d48216b8dea0b5.SwifT@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/system/userdomain.if X-VCS-Directories: policy/modules/system/ X-VCS-Committer: SwifT X-VCS-Committer-Name: Sven Vermeulen X-VCS-Revision: 9901590e892d90040704d52f44d48216b8dea0b5 X-VCS-Branch: master Date: Wed, 10 Oct 2012 19:52:14 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: b5251642-7a51-4f10-a0d3-f8e643002eb9 X-Archives-Hash: b23cb36927caa5e322f6a867e65891ac commit: 9901590e892d90040704d52f44d48216b8dea0b5 Author: Dominick Grift gmail com> AuthorDate: Mon Oct 8 17:44:30 2012 +0000 Commit: Sven Vermeulen siphos be> CommitDate: Wed Oct 10 19:49:24 2012 +0000 URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=9901590e Changes to the userdomain policy module Remove evolution and evolution alarm dbus chat from common user template since callers of the evolution role are now allowed to dbus chat to evolution and evolution alarm. Common users need to be able to dbus chat with policykit and consolekit Signed-off-by: Dominick Grift gmail.com> --- policy/modules/system/userdomain.if | 7 +++++-- 1 files changed, 5 insertions(+), 2 deletions(-) diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if index 216862b..21eb5a6 100644 --- a/policy/modules/system/userdomain.if +++ b/policy/modules/system/userdomain.if @@ -618,8 +618,7 @@ template(`userdom_common_user_template',` ') optional_policy(` - evolution_dbus_chat($1_t) - evolution_alarm_dbus_chat($1_t) + consolekit_dbus_chat($1_t) ') optional_policy(` @@ -633,6 +632,10 @@ template(`userdom_common_user_template',` optional_policy(` networkmanager_dbus_chat($1_t) ') + + optional_policy(` + policykit_dbus_chat($1_t) + ') ') optional_policy(`