Allow xdm_t to transition to shutdown_t domain

Several DMs offer the possibility to shutdown the system. I personally don't think a bool is neccessary for this permission, but I wouldn't oppose one either.
2014-06-04 17:12:40 +02:00 · 2014-06-04 17:12:40 +02:00 · c55cd63011
parent f6352c317b
commit c55cd63011
1 changed files with 4 additions and 0 deletions
--- a/policy/modules/services/xserver.te
+++ b/policy/modules/services/xserver.te
@ -558,6 +558,10 @@ optional_policy(`
 	seutil_sigchld_newrole(xdm_t)
 ')

+optional_policy(`
+	shutdown_domtrans(xdm_t)
+')
+
 optional_policy(`
 	udev_read_db(xdm_t)
 ')