PERFORCE change 113396 for review

[Todd Miller]

http://perforce.freebsd.org/chv.cgi?CH=113396

Change 113396 by millert at millert_macbook on 2007/01/22 19:58:11

	Use Frameworks.

Affected files ...

.. //depot/projects/trustedbsd/sedarwin8/policies/sedarwin/refpolicy/policy/modules/darwin/coreaudiod.te#8 edit
.. //depot/projects/trustedbsd/sedarwin8/policies/sedarwin/refpolicy/policy/modules/darwin/mDNSResponder.te#6 edit
.. //depot/projects/trustedbsd/sedarwin8/policies/sedarwin/refpolicy/policy/modules/darwin/memberd.te#5 edit
.. //depot/projects/trustedbsd/sedarwin8/policies/sedarwin/refpolicy/policy/modules/darwin/update.te#5 edit

Differences ...

==== //depot/projects/trustedbsd/sedarwin8/policies/sedarwin/refpolicy/policy/modules/darwin/coreaudiod.te#8 (text+ko) ====

@@ -54,6 +54,9 @@
 # Talk to lookupd
 lookupd_allow_ipc(coreaudiod_t)
 
+# Use Frameworks
+frameworks_read(coreaudiod_t)
+
 # Allow reading of prefs
 darwin_allow_global_pref_read(coreaudiod_t)
 darwin_allow_host_pref_read(coreaudiod_t)

==== //depot/projects/trustedbsd/sedarwin8/policies/sedarwin/refpolicy/policy/modules/darwin/mDNSResponder.te#6 (text+ko) ====

@@ -70,6 +70,9 @@
 # Use CoreServices
 darwin_allow_CoreServices_read(mDNSResponder_t)
 
+# Use Frameworks
+frameworks_read(mDNSResponder_t)
+
 # Read prefs
 darwin_allow_global_pref_read(mDNSResponder_t)
 darwin_allow_host_pref_read(mDNSResponder_t)

==== //depot/projects/trustedbsd/sedarwin8/policies/sedarwin/refpolicy/policy/modules/darwin/memberd.te#5 (text+ko) ====

@@ -55,5 +55,8 @@
 # Talk to WindowServer
 WindowServer_allow_ipc(memberd_t)
 
+# Use Frameworks
+frameworks_read(memberd_t)
+
 # read /System
 darwin_allow_system_read(memberd_t)

==== //depot/projects/trustedbsd/sedarwin8/policies/sedarwin/refpolicy/policy/modules/darwin/update.te#5 (text+ko) ====

@@ -34,5 +34,8 @@
 # talk to launchd
 init_allow_ipc(update_t)
 
+# Use Frameworks
+frameworks_read(update_t)
+
 # read /System
 darwin_allow_system_read(update_t)