Skip to contentSkip to conversation

Allow the xdm_t domain to enter all the gkeyringd ones

PATCH New Laurent Bigonville 2 participants 2 messages Apr 11, 2014 – Apr 15, 2014

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 Allow the xdm_t domain to enter all the gkeyringd ones

From: Laurent Bigonville <[email protected]>

During the opening of the session, the pam_gnome_keyring module is starting the daemon in the gkeyringd user domain, allow xdm_t to transition to it.

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742966

---
 policy/modules/services/xserver.te | 4 ++++
 1 file changed, 4 insertions(+)
policy/modules/services/xserver.te +4 -0
index 8479a52..a86f701 100644
@@ -524,6 +524,10 @@ optional_policy(`
 ')
 
 optional_policy(`
+	gnome_spec_domtrans_all_gkeyringd(xdm_t)
+')
+
+optional_policy(`
 	# Talk to the console mouse server.
 	gpm_stream_connect(xdm_t)
 	gpm_setattr_gpmctl(xdm_t)
Signature · 1 line
1.9.2
#1 lore raw

PATCH 1/1 Allow the xdm_t domain to enter all the gkeyringd ones

Quoted 16 lines · Laurent Bigonville

From: Laurent Bigonville <[email protected]>

During the opening of the session, the pam_gnome_keyring module is starting the daemon in the gkeyringd user domain, allow xdm_t to transition to it.

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742966

---
 policy/modules/services/xserver.te | 4 ++++
 1 file changed, 4 insertions(+)
policy/modules/services/xserver.te +0 -0
index 8479a52..a86f701 100644

policy/modules/services/xserver.te optional_policy(` · line 533

Quoted 10 lines
policy/modules/services/xserver.te +4 -0
@@ -524,6 +524,10 @@ optional_policy(`
 ')
 
 optional_policy(`
+	gnome_spec_domtrans_all_gkeyringd(xdm_t)
+')
+
+optional_policy(`
 	# Talk to the console mouse server.
 	gpm_stream_connect(xdm_t)
 	gpm_setattr_gpmctl(xdm_t)

Merged.

Signature · 3 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com