From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.sws.net.au (smtp.sws.net.au [144.76.186.9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 63A1C1BD9C9 for ; Thu, 7 May 2026 01:34:46 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=144.76.186.9 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1778117689; cv=none; b=Q0NZuKwmgTv3YLWlaivfur57yaAeza2h97RqPkJ+0ZrpKNd3Cgs7pRRDJcGgL/vDxLve3rZVYsyDiXSjs+JsRUFTDl/TCdcyM9m5G6PfITcmRO5MG94zAiQ9GjplYMWEPgCJ9QbQqHzGVbLTvc5O4Q9UpsPM4uEsj1zMdjoS1RE= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1778117689; c=relaxed/simple; bh=khE7s4/rlk5v1BsN+AE78Te3huWGcd+39dfGgzvcONo=; h=From:To:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Type; b=naaVXh1Vx4wFI/9gr1DtHKicmtmh6DLKuU6xn6mdwupe6Q+imzq66d+rkPou+VZU6OtZARDCObTBYUcI8e58fTE2+7B4bGFPiGyvHZa8jWYDakwOgNamrVdvcW7Tl3NdDXSzcTiLXO31z2+6ngCfb/b5NhCP7oOiUmWdX9ECI2E= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=coker.com.au; spf=pass smtp.mailfrom=coker.com.au; dkim=pass (1024-bit key) header.d=coker.com.au header.i=@coker.com.au header.b=zu9TQZsE; arc=none smtp.client-ip=144.76.186.9 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=coker.com.au Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=coker.com.au Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=coker.com.au header.i=@coker.com.au header.b="zu9TQZsE" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=coker.com.au; s=2008; t=1778117679; bh=bDLsGkgUeE9/+oXEykH/+cvFT0fLUW7CzHsJSn/Hmok=; l=521; h=From:To:Reply-To:Subject:Date:In-Reply-To:References:From; b=zu9TQZsEXgDzWarlFJUm7B0vnSNv59KzSGOPUAN1DY4dLjLCCrQswa9t7iNo6MLg3 QpGSbdfGXZ3iSbLk1XgXKiNozC0/Mb2L6o6GQwhfIUFVi+m8Ekt8Akv9JDU7Ss3TlY ATL4qe873ysz5IAwR59gTbbI3yr7bhTxYSLKzSiI= Received: from xev.localnet (123-243-116-70.tpgi.com.au [123.243.116.70]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) (Authenticated sender: russell@coker.com.au) by smtp.sws.net.au (Postfix) with ESMTPSA id 7868F10187; Thu, 07 May 2026 11:34:38 +1000 (AEST) From: Russell Coker To: selinux-refpolicy@vger.kernel.org, "Christopher J. PeBenito" Reply-To: russell@coker.com.au Subject: Re: xserver policy Date: Thu, 07 May 2026 11:34:35 +1000 Message-ID: <10868043.nUPlyArG6x@xev> In-Reply-To: <5682a43b-3ab8-47c1-885b-128ac388450c@ieee.org> References: <3065155.e9J7NaK4W3@xev> <14459900.RDIVbhacDa@dojacat> <5682a43b-3ab8-47c1-885b-128ac388450c@ieee.org> Precedence: bulk X-Mailing-List: selinux-refpolicy@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="utf-8" On Thursday, 7 May 2026 04:17:46 AEST Christopher J. PeBenito wrote: > > Are you saying we should remove the X server policy or just move xdm_t to > > a > > different module? > > > > I'd prefer to remove X11 support. > > Separate xdm to a different module. I don't think X11/xserver rules > should be dropped yet. OK I'll send a PR for making xdm_t a confined domain and after that one to put it in a separate module. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/