From 1dc27053884c4666840a96593d8d05ba46ab0e82 Mon Sep 17 00:00:00 2001 From: Dominick Grift Date: Thu, 27 Sep 2012 15:56:32 +0200 Subject: [PATCH] Restricted Xwindows user domains run windows managers in the windows managers domain Signed-off-by: Dominick Grift --- policy/modules/system/userdomain.if | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if index e720dcd85..8c2d31cbd 100644 --- a/policy/modules/system/userdomain.if +++ b/policy/modules/system/userdomain.if @@ -906,6 +906,10 @@ template(`userdom_restricted_xwindows_user_template',` optional_policy(` cups_dbus_chat($1_t) ') + + optional_policy(` + wm_role_template($1, $1_r, $1_t) + ') ') optional_policy(`