Include the X server tmpfs rw permissions in the X shared memory

write access tunable policy under request from Christoper
PeBenito.

Signed-off-by: Guido Trentalancia <guido@trentalancia.com>
---
 policy/modules/services/xserver.if |    6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)
This commit is contained in:
Guido Trentalancia 2023-09-05 21:18:53 +02:00
parent 3eef4bc6fd
commit 38fe903684

View File

@ -127,7 +127,7 @@ template(`xserver_restricted_role',`
allow $2 xserver_t:shm rw_shm_perms;
')
tunable_policy(`allow_write_xserver_tmpfs',`
tunable_policy(`allow_write_xshm || allow_write_xserver_tmpfs',`
allow $2 xserver_tmpfs_t:file rw_file_perms;
')
@ -295,7 +295,7 @@ interface(`xserver_rw_session',`
allow $1 xserver_t:shm rw_shm_perms;
')
tunable_policy(`allow_write_xserver_tmpfs',`
tunable_policy(`allow_write_xshm || allow_write_xserver_tmpfs',`
allow $1 xserver_tmpfs_t:file rw_file_perms;
')
')
@ -494,7 +494,7 @@ template(`xserver_user_x_domain_template',`
allow $2 xserver_t:shm rw_shm_perms;
')
tunable_policy(`allow_write_xserver_tmpfs',`
tunable_policy(`allow_write_xshm || allow_write_xserver_tmpfs',`
allow $2 xserver_tmpfs_t:file rw_file_perms;
')
')