Bug 1031860

Summary: [PATCH] Fix drm master and inputs passing from logind via dbus
Product: [Fedora] Fedora Reporter: Lubomir Rintel <lkundrak>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: dominick.grift, dwalsh, lvrabec, mgrepl, systemd-maint
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-12-06 15:22:44 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
logind part
none
dbus part none

Description Lubomir Rintel 2013-11-19 01:48:21 UTC
Created attachment 825869 [details]
logind part

Required to make recent weston work. It uses the TakeDevice [1] API to open the seat devices it needs, namely DRM master and input event devices.

[1] http://www.freedesktop.org/wiki/Software/systemd/logind/

Unfortunately it works by passing an open file descriptor via DBus, so an AVC for dbus is generated. For now no other devices are needed though.

#============= system_dbusd_t ==============

allow system_dbusd_t dri_device_t:chr_file { read write };
allow system_dbusd_t event_device_t:chr_file { read write };

#============= systemd_logind_t ==============

allow systemd_logind_t dri_device_t:chr_file { read write ioctl open };

Comment 1 Lubomir Rintel 2013-11-19 01:48:55 UTC
Created attachment 825870 [details]
dbus part

Comment 2 Miroslav Grepl 2013-12-06 15:22:44 UTC
Added to rawhide.