diff --git a/policy/modules/services/xserver.if b/policy/modules/services/xserver.if index 358793639..bfcbe487a 100644 --- a/policy/modules/services/xserver.if +++ b/policy/modules/services/xserver.if @@ -802,6 +802,24 @@ interface(`xserver_dontaudit_use_xdm_fds',` dontaudit $1 xdm_t:fd use; ') +######################################## +## +## Allow domain to send sigchld to xdm_t +## +## +## +## Domain allowed access. +## +## +# +interface(`xserver_sigchld_xdm',` + gen_require(` + type xdm_t; + ') + + allow $1 xdm_t:process sigchld; +') + ######################################## ## ## Read and write XDM unnamed pipes. diff --git a/policy/modules/services/xserver.te b/policy/modules/services/xserver.te index 15ff7a375..33bb57388 100644 --- a/policy/modules/services/xserver.te +++ b/policy/modules/services/xserver.te @@ -1,4 +1,4 @@ -policy_module(xserver, 3.13.9) +policy_module(xserver, 3.13.10) gen_require(` class x_drawable all_x_drawable_perms;