* using the xdm_t:fifo_file sometimes requires ioctl
@ 2007-03-08 14:50 Daniel J Walsh
2007-03-19 17:32 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Daniel J Walsh @ 2007-03-08 14:50 UTC (permalink / raw)
To: Christopher J. PeBenito, SE Linux
[-- Attachment #1: Type: text/plain, Size: 52 bytes --]
Also needs to communicate with consolekit via dbus.
[-- Attachment #2: nsaserefpolicy_policy_modules_services_xserver.patch --]
[-- Type: text/x-patch, Size: 715 bytes --]
--- nsaserefpolicy/policy/modules/services/xserver.if 2007-02-19 11:32:53.000000000 -0500
+++ serefpolicy-2.5.8/policy/modules/services/xserver.if 2007-03-08 08:42:37.000000000 -0500
@@ -826,7 +826,7 @@
type xdm_t;
')
- dontaudit $1 xdm_t:fifo_file { getattr read write };
+ dontaudit $1 xdm_t:fifo_file rw_fifo_file_perms;
')
########################################
--- nsaserefpolicy/policy/modules/services/xserver.te 2007-02-19 11:32:53.000000000 -0500
+++ serefpolicy-2.5.8/policy/modules/services/xserver.te 2007-03-08 08:42:37.000000000 -0500
@@ -345,6 +345,10 @@
')
optional_policy(`
+ consolekit_dbus_chat(xdm_t)
+')
+
+optional_policy(`
userhelper_dontaudit_search_config(xdm_t)
')
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: using the xdm_t:fifo_file sometimes requires ioctl
2007-03-08 14:50 using the xdm_t:fifo_file sometimes requires ioctl Daniel J Walsh
@ 2007-03-19 17:32 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2007-03-19 17:32 UTC (permalink / raw)
To: Daniel J Walsh; +Cc: SE Linux
On Thu, 2007-03-08 at 09:50 -0500, Daniel J Walsh wrote:
> Also needs to communicate with consolekit via dbus.
Merged. Moved the TE change up in the file.
> --- nsaserefpolicy/policy/modules/services/xserver.if 2007-02-19 11:32:53.000000000 -0500
> +++ serefpolicy-2.5.8/policy/modules/services/xserver.if 2007-03-08 08:42:37.000000000 -0500
> @@ -826,7 +826,7 @@
> type xdm_t;
> ')
>
> - dontaudit $1 xdm_t:fifo_file { getattr read write };
> + dontaudit $1 xdm_t:fifo_file rw_fifo_file_perms;
> ')
>
> ########################################
> --- nsaserefpolicy/policy/modules/services/xserver.te 2007-02-19 11:32:53.000000000 -0500
> +++ serefpolicy-2.5.8/policy/modules/services/xserver.te 2007-03-08 08:42:37.000000000 -0500
> @@ -345,6 +345,10 @@
> ')
>
> optional_policy(`
> + consolekit_dbus_chat(xdm_t)
> +')
> +
> +optional_policy(`
> userhelper_dontaudit_search_config(xdm_t)
> ')
>
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2007-03-19 17:31 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-03-08 14:50 using the xdm_t:fifo_file sometimes requires ioctl Daniel J Walsh
2007-03-19 17:32 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.