Attachment 297559 Details for Bug 436918 – xserver policy patch to better support mls

[patch] xserver policy patch to better support mls

xserver.te.patch (text/plain), 1.09 KB, created by Joe Nall on 2008-03-11 04:25:40 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Joe Nall

Created: 2008-03-11 04:25:40 UTC

Size: 1.09 KB

patch

obsolete

>--- serefpolicy-3.3.1/policy/modules/services/xserver.te.orig	2008-03-10 20:13:42.000000000 -0500
>+++ serefpolicy-3.3.1/policy/modules/services/xserver.te	2008-03-10 22:43:56.000000000 -0500
>@@ -182,6 +182,11 @@ ifdef(`enable_mcs',`
> 	init_ranged_daemon_domain(xdm_t,xdm_exec_t,s0 - mcs_systemhigh)
> ')
> 
>+ifdef(`enable_mls',`
>+	init_ranged_domain(xdm_t,xdm_exec_t,s0 - mls_systemhigh)
>+	init_ranged_daemon_domain(xdm_t,xdm_exec_t,s0 - mls_systemhigh)
>+')
>+
> optional_policy(`
> 	prelink_object_file(xkb_var_lib_t)
> ')
>@@ -268,6 +273,13 @@ stream_connect_pattern(xdm_t,xdm_xserver
> delete_files_pattern(xdm_t,xdm_xserver_tmp_t,xdm_xserver_tmp_t)
> delete_sock_files_pattern(xdm_t,xdm_xserver_tmp_t,xdm_xserver_tmp_t)
> 
>+mls_file_read_to_clearance(xdm_xserver_t)
>+mls_file_write_to_clearance(xdm_xserver_t)
>+
>+selinux_compute_access_vector(xdm_xserver_t)
>+selinux_compute_create_context(xdm_xserver_t)
>+selinux_validate_context(xdm_xserver_t)
>+
> manage_dirs_pattern(xdm_t,xserver_log_t,xserver_log_t)
> manage_files_pattern(xdm_t,xserver_log_t,xserver_log_t)
> manage_fifo_files_pattern(xdm_t,xserver_log_t,xserver_log_t)

Actions: View | Diff

Attachments on bug 436918: 297559