allow xdm_t to execute content labeled xdm_tmp_t, needed for xdm to be able to run...

diff --git a/policy/modules/services/xserver.te b/policy/modules/services/xserver.te
index 00b270e4a1a605595a7f67d49f8b3a292d8a1524..453a478dcb268b316272f78960f3b74f0f2bc286 100644 (file)
--- a/policy/modules/services/xserver.te
+++ b/policy/modules/services/xserver.te
@@ -467,6 +467,7 @@ manage_sock_files_pattern(xdm_t, xdm_tmp_t, xdm_tmp_t)
 files_tmp_filetrans(xdm_t, xdm_tmp_t, { file dir sock_file lnk_file })
 relabelfrom_dirs_pattern(xdm_t, xdm_tmp_t, xdm_tmp_t)
 relabelfrom_files_pattern(xdm_t, xdm_tmp_t, xdm_tmp_t)
+can_exec(xdm_t, xdm_tmp_t)
 
 manage_dirs_pattern(xdm_t, xdm_tmpfs_t, xdm_tmpfs_t)
 manage_files_pattern(xdm_t, xdm_tmpfs_t, xdm_tmpfs_t)