Skip to content

Commit 5dafe75

Browse files
committed
dbus: Allow sock_file labelled as session_dbusd_tmp_t
The DBus session socket fallback location is /tmp/dbus-RANDOM. https://github.com/freedesktop/dbus/blob/ef55a3db0d8f17848f8a579092fb05900cc076f5/configure.ac#L1641 Signed-off-by: Jason Zaman <perfinion@gentoo.org>
1 parent 8c8f4a3 commit 5dafe75

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

policy/modules/services/dbus.if

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -96,6 +96,7 @@ template(`dbus_role_template',`
9696
allow $3 { session_dbusd_home_t session_dbusd_tmp_t }:dir { manage_dir_perms relabel_dir_perms };
9797
allow $3 { session_dbusd_home_t session_dbusd_tmp_t }:file { manage_file_perms relabel_file_perms };
9898
allow $3 session_dbusd_runtime_t:sock_file { manage_sock_file_perms relabel_sock_file_perms };
99+
allow $3 session_dbusd_tmp_t:sock_file { manage_sock_file_perms relabel_sock_file_perms };
99100
userdom_user_home_dir_filetrans($3, session_dbusd_home_t, dir, ".dbus")
100101

101102
domtrans_pattern($3, dbusd_exec_t, $1_dbusd_t)

0 commit comments

Comments
 (0)