From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-0.9 required=3.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE, SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id D509CC35242 for ; Wed, 12 Feb 2020 02:38:54 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id A8EC3206ED for ; Wed, 12 Feb 2020 02:38:54 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (1024-bit key) header.d=coker.com.au header.i=@coker.com.au header.b="I3wuy+oo" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727658AbgBLCiy (ORCPT ); Tue, 11 Feb 2020 21:38:54 -0500 Received: from smtp.sws.net.au ([46.4.88.250]:44238 "EHLO smtp.sws.net.au" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727609AbgBLCiy (ORCPT ); Tue, 11 Feb 2020 21:38:54 -0500 Received: from xev.coker.com.au (localhost [127.0.0.1]) by smtp.sws.net.au (Postfix) with ESMTP id 9E8C1EDB8 for ; Wed, 12 Feb 2020 13:38:52 +1100 (AEDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=coker.com.au; s=2008; t=1581475132; bh=g8wTEmPQhMjy1m/4yFw44oa3cSsQuPtO0VwfrZIl4Qk=; l=2292; h=From:To:Reply-To:Subject:Date:From; b=I3wuy+oodDuqih86RU0jI/Zeurn+zRc+2AtCYA0FdLf3/96Y36397Ta6G+D7a1Ofd Z2VLF+hl1CprOlg91Of10jiHHUG1abW4jKhh6YzVtazalONdSbsxe4/CdQUzAReZLD rc1AGR7Ir8vYkHPf1okdDaK/sMlxCiIiERUUwIz0= Received: by xev.coker.com.au (Postfix, from userid 1001) id 6424FF2C813; Wed, 12 Feb 2020 13:38:47 +1100 (AEDT) From: Russell Coker To: "selinux-refpolicy@vger.kernel.org" Reply-To: russell@coker.com.au Subject: pulseaudio patch Date: Wed, 12 Feb 2020 13:38:47 +1100 Message-ID: <1995964.CuLPjsHtsC@xev> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="nextPart2383410.TjLgUERFZe" Content-Transfer-Encoding: 7Bit Sender: selinux-refpolicy-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: selinux-refpolicy@vger.kernel.org This is a multi-part message in MIME format. --nextPart2383410.TjLgUERFZe Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" The attached patch has a few small changes needed for pulseaudio on systemd. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/ --nextPart2383410.TjLgUERFZe Content-Disposition: attachment; filename="pulseaudio.diff" Content-Transfer-Encoding: 7Bit Content-Type: text/x-patch; charset="UTF-8"; name="pulseaudio.diff" Index: refpolicy-2.20200209/policy/modules/apps/pulseaudio.te =================================================================== --- refpolicy-2.20200209.orig/policy/modules/apps/pulseaudio.te +++ refpolicy-2.20200209/policy/modules/apps/pulseaudio.te @@ -92,6 +92,8 @@ files_pid_filetrans(pulseaudio_t, pulsea manage_dirs_pattern(pulseaudio_t, pulseaudio_xdg_config_t, pulseaudio_xdg_config_t) manage_files_pattern(pulseaudio_t, pulseaudio_xdg_config_t, pulseaudio_xdg_config_t) +allow pulseaudio_t pulseaudio_xdg_config_t:file map; + xdg_config_filetrans(pulseaudio_t, pulseaudio_xdg_config_t, dir, "pulse") allow pulseaudio_t pulseaudio_client:process signull; @@ -146,7 +148,7 @@ miscfiles_read_localization(pulseaudio_t seutil_read_config(pulseaudio_t) -userdom_read_user_tmpfs_files(pulseaudio_t) +userdom_rw_user_tmpfs_files(pulseaudio_t) userdom_map_user_tmpfs_files(pulseaudio_t) userdom_delete_user_tmpfs_files(pulseaudio_t) userdom_search_user_home_dirs(pulseaudio_t) @@ -155,6 +157,7 @@ userdom_search_user_home_content(pulseau userdom_manage_user_tmp_dirs(pulseaudio_t) userdom_manage_user_tmp_files(pulseaudio_t) userdom_manage_user_tmp_sockets(pulseaudio_t) +userdom_write_all_user_runtime_named_sockets(pulseaudio_t) tunable_policy(`pulseaudio_execmem',` allow pulseaudio_t self:process execmem; @@ -224,6 +227,13 @@ optional_policy(` ') optional_policy(` + # for /run/systemd/seats and /run/systemd/sessions + systemd_read_logind_sessions_files(pulseaudio_t) + # for /run/systemd/users/$PID + systemd_read_logind_pids(pulseaudio_t) +') + +optional_policy(` udev_read_pid_files(pulseaudio_t) udev_read_state(pulseaudio_t) udev_read_db(pulseaudio_t) --nextPart2383410.TjLgUERFZe--