PERFORCE change 113434 for review

[Todd Miller]

http://perforce.freebsd.org/chv.cgi?CH=113434

Change 113434 by millert at millert_macbook on 2007/01/22 20:23:54

	Keychain rules.

Affected files ...

.. //depot/projects/trustedbsd/sedarwin8/policies/sedarwin/refpolicy/policy/modules/system/init.te#15 edit

Differences ...

==== //depot/projects/trustedbsd/sedarwin8/policies/sedarwin/refpolicy/policy/modules/system/init.te#15 (text+ko) ====

@@ -668,6 +668,9 @@
 allow init_t darwin_applications_t:dir { search getattr read };
 allow init_t darwin_applications_t:file { read getattr };
 
+allow init_t darwin_keychain_t:dir { add_name remove_name };
+allow init_t darwin_keychain_t:file { create write link unlink setattr };
+
 # Use Frameworks
 frameworks_read(init_t)
 frameworks_execute(init_t)