Skip to contentSkip to conversation

Allow xdm_t to transition to shutdown_t domain

PATCH New Luis Ressel 2 participants 2 messages Jun 4, 2014 – Jun 9, 2014

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 Allow xdm_t to transition to shutdown_t domain

Several DMs offer the possibility to shutdown the system. I personally don't think a bool is neccessary for this permission, but I wouldn't oppose one either.

---
 policy/modules/services/xserver.te | 4 ++++
 1 file changed, 4 insertions(+)
policy/modules/services/xserver.te +4 -0
index f81fcac..30e544c 100644
@@ -559,6 +559,10 @@ optional_policy(`
 ')
 
 optional_policy(`
+	shutdown_domtrans(xdm_t)
+')
+
+optional_policy(`
 	udev_read_db(xdm_t)
 ')
 
Signature · 1 line
2.0.0
#1 lore raw

PATCH 1/1 Allow xdm_t to transition to shutdown_t domain

Quoted 12 lines · Luis Ressel

Several DMs offer the possibility to shutdown the system. I personally don't think a bool is neccessary for this permission, but I wouldn't oppose one either.

---
 policy/modules/services/xserver.te | 4 ++++
 1 file changed, 4 insertions(+)
policy/modules/services/xserver.te +0 -0
index f81fcac..30e544c 100644

policy/modules/services/xserver.te optional_policy(` · line 567

Quoted 9 lines
policy/modules/services/xserver.te +4 -0
@@ -559,6 +559,10 @@ optional_policy(`
 ')
 
 optional_policy(`
+	shutdown_domtrans(xdm_t)
+')
+
+optional_policy(`
 	udev_read_db(xdm_t)
 ')

Merged.

Signature · 3 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com