From adfe24f6ce8020a9d6c5a6cc4b5e8d80ce7be578 Mon Sep 17 00:00:00 2001
From: Laurent Bigonville <bigon@bigon.be>
Date: Fri, 11 Apr 2014 19:28:27 +0200
Subject: [PATCH] Allow the xdm_t domain to enter all the gkeyringd ones

During the opening of the session, the pam_gnome_keyring module is
starting the daemon in the gkeyringd user domain, allow xdm_t to
transition to it.

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742966
---
 policy/modules/services/xserver.te | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/policy/modules/services/xserver.te b/policy/modules/services/xserver.te
index 8479a529d..a86f701df 100644
--- a/policy/modules/services/xserver.te
+++ b/policy/modules/services/xserver.te
@@ -523,6 +523,10 @@ optional_policy(`
 	')
 ')
 
+optional_policy(`
+	gnome_spec_domtrans_all_gkeyringd(xdm_t)
+')
+
 optional_policy(`
 	# Talk to the console mouse server.
 	gpm_stream_connect(xdm_t)