nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Xguest patch from Dan Walsh.

This commit is contained in:
Chris PeBenito 2010-02-17 09:23:17 -05:00
parent 6f30d7e770
commit c06a4452e2
1 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
policy/modules/roles/xguest.te
View File

@ -1,5 +1,5 @@
policy_module(xguest, 1.0.0)
policy_module(xguest, 1.0.1)
########################################
#
@ -36,6 +36,20 @@ userdom_restricted_xwindows_user_template(xguest)
# Local policy
#
ifndef(`enable_mls',`
fs_exec_noxattr(xguest_t)
tunable_policy(`user_rw_noexattrfile',`
fs_manage_noxattr_fs_files(xguest_t)
fs_manage_noxattr_fs_dirs(xguest_t)
# Write floppies
storage_raw_read_removable_device(xguest_t)
storage_raw_write_removable_device(xguest_t)
',`
storage_raw_read_removable_device(xguest_t)
')
')
# Allow mounting of file systems
optional_policy(`
tunable_policy(`xguest_mount_media',`
@ -77,6 +91,8 @@ optional_policy(`
optional_policy(`
tunable_policy(`xguest_connect_network',`
networkmanager_dbus_chat(xguest_t)
corenet_tcp_connect_pulseaudio_port(xguest_t)
corenet_tcp_connect_ipp_port(xguest_t)
')
')