diff --git a/policy/modules/services/xserver.if b/policy/modules/services/xserver.if index 6bf0ecc2d..690c2b674 100644 --- a/policy/modules/services/xserver.if +++ b/policy/modules/services/xserver.if @@ -711,6 +711,27 @@ interface(`xserver_dontaudit_rw_xdm_pipes',` dontaudit $1 xdm_t:fifo_file rw_fifo_file_perms; ') +######################################## +## +## Send and receive messages from +## xdm over dbus. +## +## +## +## Domain allowed access. +## +## +# +interface(`xserver_dbus_chat_xdm',` + gen_require(` + type xdm_t; + class dbus send_msg; + ') + + allow $1 xdm_t:dbus send_msg; + allow xdm_t $1:dbus send_msg; +') + ######################################## ## ## Read xdm process state files. diff --git a/policy/modules/services/xserver.te b/policy/modules/services/xserver.te index f187e0acb..18982424a 100644 --- a/policy/modules/services/xserver.te +++ b/policy/modules/services/xserver.te @@ -1,4 +1,4 @@ -policy_module(xserver, 3.11.3) +policy_module(xserver, 3.11.4) gen_require(` class x_drawable all_x_drawable_perms; @@ -510,6 +510,10 @@ optional_policy(` colord_dbus_chat(xdm_t) ') +optional_policy(` + colord_dbus_chat(xdm_t) +') + optional_policy(` consolekit_dbus_chat(xdm_t) ')