From a5fc78b88a081ddcaac5fea6ceb288b4a195260f Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Fri, 4 May 2012 08:35:24 -0400 Subject: [PATCH] Move domain call in xserver. --- policy/modules/services/xserver.te | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/policy/modules/services/xserver.te b/policy/modules/services/xserver.te index 259a67b88..e630a499a 100644 --- a/policy/modules/services/xserver.te +++ b/policy/modules/services/xserver.te @@ -635,8 +635,6 @@ allow xserver_t xauth_home_t:file read_file_perms; manage_files_pattern(xserver_t, xserver_log_t, xserver_log_t) logging_log_filetrans(xserver_t, xserver_log_t, file) -domain_dontaudit_search_all_domains_state(xserver_t) - kernel_read_system_state(xserver_t) kernel_read_device_sysctls(xserver_t) kernel_read_modprobe_sysctls(xserver_t) @@ -681,6 +679,8 @@ dev_rw_xserver_misc(xserver_t) dev_rw_input_dev(xserver_t) dev_rwx_zero(xserver_t) +domain_dontaudit_search_all_domains_state(xserver_t) + files_read_etc_files(xserver_t) files_read_etc_runtime_files(xserver_t) files_read_usr_files(xserver_t)