PERFORCE change 113388 for review

[Todd Miller]

http://perforce.freebsd.org/chv.cgi?CH=113388

Change 113388 by millert at millert_macbook on 2007/01/22 19:55:05

	Talk with kextd a bit more

Affected files ...

.. //depot/projects/trustedbsd/sedarwin8/policies/sedarwin/refpolicy/policy/modules/darwin/coreservicesd.te#4 edit

Differences ...

==== //depot/projects/trustedbsd/sedarwin8/policies/sedarwin/refpolicy/policy/modules/darwin/coreservicesd.te#4 (text+ko) ====

@@ -68,6 +68,10 @@
 # An interface should be defined for this.
 allow coreservicesd_t loginwindow_t:process taskforpid;
 
+# Talk to kextd
+allow coreservicesd_t kextd_t:process taskforpid;
+allow coreservicesd_t kextd_t:mach_port { hold_send_once hold_send send recv };
+
 # Read user home dirs
 userdom_search_all_users_home_content(coreservicesd_t)
 userdom_read_all_users_home_content_files(coreservicesd_t)