xdm sigchld interface from Russell Coker.

policy/modules/services/xserver.if

@@ -802,6 +802,24 @@ interface(`xserver_dontaudit_use_xdm_fds',`
 	dontaudit $1 xdm_t:fd use;
 ')
 
+########################################
+## <summary>
+##	Allow domain to send sigchld to xdm_t
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`xserver_sigchld_xdm',`
+	gen_require(`
+		type xdm_t;
+	')
+
+	allow $1 xdm_t:process sigchld;
+')
+
 ########################################
 ## <summary>
 ##	Read and write XDM unnamed pipes.

policy/modules/services/xserver.te

@@ -1,4 +1,4 @@
-policy_module(xserver, 3.13.9)
+policy_module(xserver, 3.13.10)
 
 gen_require(`
 	class x_drawable all_x_drawable_perms;