Include the X server tmpfs rw permissions in the X shared memory
write access tunable policy under request from Christoper PeBenito. Signed-off-by: Guido Trentalancia <guido@trentalancia.com> --- policy/modules/services/xserver.if | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-)
This commit is contained in:
parent
3eef4bc6fd
commit
38fe903684
@ -127,7 +127,7 @@ template(`xserver_restricted_role',`
|
||||
allow $2 xserver_t:shm rw_shm_perms;
|
||||
')
|
||||
|
||||
tunable_policy(`allow_write_xserver_tmpfs',`
|
||||
tunable_policy(`allow_write_xshm || allow_write_xserver_tmpfs',`
|
||||
allow $2 xserver_tmpfs_t:file rw_file_perms;
|
||||
')
|
||||
|
||||
@ -295,7 +295,7 @@ interface(`xserver_rw_session',`
|
||||
allow $1 xserver_t:shm rw_shm_perms;
|
||||
')
|
||||
|
||||
tunable_policy(`allow_write_xserver_tmpfs',`
|
||||
tunable_policy(`allow_write_xshm || allow_write_xserver_tmpfs',`
|
||||
allow $1 xserver_tmpfs_t:file rw_file_perms;
|
||||
')
|
||||
')
|
||||
@ -494,7 +494,7 @@ template(`xserver_user_x_domain_template',`
|
||||
allow $2 xserver_t:shm rw_shm_perms;
|
||||
')
|
||||
|
||||
tunable_policy(`allow_write_xserver_tmpfs',`
|
||||
tunable_policy(`allow_write_xshm || allow_write_xserver_tmpfs',`
|
||||
allow $2 xserver_tmpfs_t:file rw_file_perms;
|
||||
')
|
||||
')
|
||||
|
Loading…
Reference in New Issue
Block a user