diff --git a/policy/modules/apps/pulseaudio.te b/policy/modules/apps/pulseaudio.te index 4472d39a3..d847992e5 100644 --- a/policy/modules/apps/pulseaudio.te +++ b/policy/modules/apps/pulseaudio.te @@ -75,7 +75,7 @@ userdom_user_home_dir_filetrans(pulseaudio_t, pulseaudio_home_t, file, ".pulse-c manage_dirs_pattern(pulseaudio_t, pulseaudio_tmp_t, pulseaudio_tmp_t) manage_files_pattern(pulseaudio_t, pulseaudio_tmp_t, pulseaudio_tmp_t) manage_sock_files_pattern(pulseaudio_t, pulseaudio_tmp_t, pulseaudio_tmp_t) -files_tmp_filetrans(pulseaudio_t, pulseaudio_tmp_t, dir) +files_tmp_filetrans(pulseaudio_t, pulseaudio_tmp_t, { dir sock_file }) userdom_user_runtime_filetrans(pulseaudio_t, pulseaudio_tmp_t, dir) userdom_user_tmp_filetrans(pulseaudio_t, pulseaudio_tmp_t, file, "autospawn.lock") userdom_user_tmp_filetrans(pulseaudio_t, pulseaudio_tmp_t, file, "pid") @@ -111,6 +111,7 @@ can_exec(pulseaudio_t, pulseaudio_exec_t) kernel_getattr_proc(pulseaudio_t) kernel_read_system_state(pulseaudio_t) kernel_read_kernel_sysctls(pulseaudio_t) +kernel_search_debugfs(pulseaudio_t) corecmd_exec_bin(pulseaudio_t) @@ -187,6 +188,7 @@ tunable_policy(`use_samba_home_dirs',` optional_policy(` alsa_read_config(pulseaudio_t) alsa_read_home_files(pulseaudio_t) + alsa_read_lib(pulseaudio_t) ') optional_policy(`