: xauth label and module request
PATCH 1/1 : xauth label and module request
When starting the X server from the console (using the startx script that is being shipped with package xinit from X.Org), a few more permissions are needed from the reference policy.
The label is for a file created by the startx script (from X.Org) and the module being requested is ipv6 (which can be disabled by other means).
policy/modules/services/xserver.te +2 -0
@@ -269,6 +269,8 @@ domain_use_interactive_fds(xauth_t) files_read_etc_files(xauth_t) files_search_pids(xauth_t) +kernel_request_load_module(xauth_t) + fs_getattr_xattr_fs(xauth_t) fs_search_auto_mountpoints(xauth_t)
policy/modules/services/xserver.fc +1 -0
@@ -8,6 +8,7 @@ HOME_DIR/\.fonts\.cache-.* -- gen_contex HOME_DIR/\.ICEauthority.* -- gen_context(system_u:object_r:iceauth_home_t,s0) HOME_DIR/\.xauth.* -- gen_context(system_u:object_r:xauth_home_t,s0) HOME_DIR/\.Xauthority.* -- gen_context(system_u:object_r:xauth_home_t,s0) +HOME_DIR/\.serverauth.* -- gen_context(system_u:object_r:xauth_home_t,s0) # # /dev
PATCH 1/1 : xauth label and module request
Quoted 7 lines · Guido Trentalancia
When starting the X server from the console (using the startx script that is being shipped with package xinit from X.Org), a few more permissions are needed from the reference policy.
The label is for a file created by the startx script (from X.Org) and the module being requested is ipv6 (which can be disabled by other means).
Merged.
Quoted 23 lines
policy/modules/services/xserver.te +2
-0@@ -269,6 +269,8 @@ domain_use_interactive_fds(xauth_t) files_read_etc_files(xauth_t) files_search_pids(xauth_t) +kernel_request_load_module(xauth_t) + fs_getattr_xattr_fs(xauth_t) fs_search_auto_mountpoints(xauth_t)policy/modules/services/xserver.fc +1
-0@@ -8,6 +8,7 @@ HOME_DIR/\.fonts\.cache-.* -- gen_contex HOME_DIR/\.ICEauthority.* -- gen_context(system_u:object_r:iceauth_home_t,s0) HOME_DIR/\.xauth.* -- gen_context(system_u:object_r:xauth_home_t,s0) HOME_DIR/\.Xauthority.* -- gen_context(system_u:object_r:xauth_home_t,s0) +HOME_DIR/\.serverauth.* -- gen_context(system_u:object_r:xauth_home_t,s0) # # /dev
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com