: patch to allow dbus chat in the xserver module

PATCH New Guido Trentalancia 1 participant 1 message Feb 16, 2011

Share & tools

Guido Trentalancia

author

2011-02-16 06:27 UTC #0 lore raw

PATCH 22/34 : patch to allow dbus chat in the xserver module

This patch adds an interface to allow dbus chat with xdm. It then uses such interface to actually allow dbus chat between dbus and xdm. The patch also allows dbus chat between hal and xdm, between policykit and xdm and between setroubleshoot and xdm.

policy/modules/services/dbus.te +4 -0

diff -pruN refpolicy-git-02022011-test-apply/policy/modules/services/dbus.te refpolicy-git-02022011-test-apply2/policy/modules/services/dbus.te
@@ -177,6 +177,10 @@ optional_policy(`
 	udev_read_db(system_dbusd_t)
 ')
 
+optional_policy(`
+	xserver_xdm_dbus_chat(system_dbusd_t)
+')
+
 ########################################
 #
 # Unconfined access to this module

policy/modules/services/xserver.if +21 -0

diff -pruN refpolicy-git-02022011-test-apply/policy/modules/services/xserver.if refpolicy-git-02022011-test-apply2/policy/modules/services/xserver.if
@@ -1269,3 +1269,24 @@ interface(`xserver_unconfined',`
 	typeattribute $1 x_domain;
 	typeattribute $1 xserver_unconfined_type;
 ')
+
+########################################
+## <summary>
+##      Send and receive messages from
+##      xdm over dbus.
+## </summary>
+## <param name="domain">
+##      <summary>
+##      Domain allowed access.
+##      </summary>
+## </param>
+#
+interface(`xserver_xdm_dbus_chat',`
+        gen_require(`
+                type xdm_t;
+                class dbus send_msg;
+        ')
+
+        allow $1 xdm_t:dbus send_msg;
+        allow xdm_t $1:dbus send_msg;
+')

policy/modules/services/xserver.te +12 -0

diff -pruN refpolicy-git-02022011-test-apply/policy/modules/services/xserver.te refpolicy-git-02022011-test-apply2/policy/modules/services/xserver.te
@@ -535,6 +535,10 @@ optional_policy(`
 ')
 
 optional_policy(`
+	hal_dbus_chat(xdm_t)
+')
+
+optional_policy(`
 	hostname_exec(xdm_t)
 ')

@@ -556,10 +560,18 @@ optional_policy(`
 ')
 
 optional_policy(`
+	policykit_dbus_chat(xdm_t)
+')
+
+optional_policy(`
 	resmgr_stream_connect(xdm_t)
 ')
 
 optional_policy(`
+	setroubleshoot_dbus_chat(xdm_t)
+')
+
+optional_policy(`
 	seutil_sigchld_newrole(xdm_t)
 ')