RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Allow xserver to process keyboard events 

On an Xorg 1.9 system with evdev driver (for keyboard InputClass), the
xserver_t domain needs to be able to read from the proper device nodes as
well as query the udev_tbl_t directory and udev itself.

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
This commit is contained in:
Sven Vermeulen 2011-02-06 16:09:18 +01:00 committed by Chris PeBenito
parent 842bd4ec8a
commit 8452a744c8
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
policy/modules/services/xserver.te
View File

@ -610,6 +610,7 @@ allow xserver_t self:unix_dgram_socket { create_socket_perms sendto };
allow xserver_t self:unix_stream_socket { create_stream_socket_perms connectto };
allow xserver_t self:tcp_socket create_stream_socket_perms;
allow xserver_t self:udp_socket create_socket_perms;
allow xserver_t self:netlink_kobject_uevent_socket create_socket_perms;
manage_dirs_pattern(xserver_t, xserver_tmp_t, xserver_tmp_t)
manage_files_pattern(xserver_t, xserver_tmp_t, xserver_tmp_t)
@ -777,6 +778,10 @@ optional_policy(`
rhgb_signal(xserver_t)
')
optional_policy(`
udev_read_db(xserver_t)
')
optional_policy(`
unconfined_domain_noaudit(xserver_t)
unconfined_domtrans(xserver_t)