xserver: Update from Russell Coker for boinc.

policy/modules/contrib

@@ -1 +1 @@
-Subproject commit e19d865537cac2d890eec74f016f23759e059d4e
+Subproject commit f43561b5cc2d0714abc0b79fd4410d5a2f7210f7

policy/modules/services/xserver.if

@@ -1234,6 +1234,24 @@ interface(`xserver_dontaudit_getattr_xdm_tmp_sockets',`
 	dontaudit $1 xdm_tmp_t:sock_file getattr;
 ')
 
+########################################
+## <summary>
+##	list xdm_tmp_t directories
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain to allow
+##	</summary>
+## </param>
+#
+interface(`xserver_list_xdm_tmp',`
+	gen_require(`
+		type xdm_tmp_t;
+	')
+
+	allow $1 xdm_tmp_t:dir list_dir_perms;
+')
+
 ########################################
 ## <summary>
 ##	Execute the X server in the X server domain.

policy/modules/services/xserver.te

@@ -1,4 +1,4 @@
-policy_module(xserver, 3.12.7)
+policy_module(xserver, 3.12.8)
 
 gen_require(`
 	class x_drawable all_x_drawable_perms;