Have xdm_t create .Xauthority files with the correct label

diff --git a/policy/modules/services/xserver.fc b/policy/modules/services/xserver.fc
index daed4fdbeef11a34ff3020bbc22211be0978174e..a3986f4cc54d8408885b7188fdfb27c094c5d5c2 100644 (file)
--- a/policy/modules/services/xserver.fc
+++ b/policy/modules/services/xserver.fc
@@ -11,6 +11,7 @@ HOME_DIR/\.DCOP.*        --   gen_context(system_u:object_r:iceauth_home_t,s0)
 HOME_DIR/\.ICEauthority.* --   gen_context(system_u:object_r:iceauth_home_t,s0)
 HOME_DIR/\.serverauth.*        --      gen_context(system_u:object_r:xauth_home_t,s0)
 HOME_DIR/\.xauth.*     --      gen_context(system_u:object_r:xauth_home_t,s0)
+HOME_DIR/\.Xauth.*     --      gen_context(system_u:object_r:xauth_home_t,s0)
 HOME_DIR/\.Xauthority.*        --      gen_context(system_u:object_r:xauth_home_t,s0)
 HOME_DIR/\.xsession-errors.*   --      gen_context(system_u:object_r:xdm_home_t,s0)
 HOME_DIR/\.dmrc.*      --      gen_context(system_u:object_r:xdm_home_t,s0)

diff --git a/policy/modules/services/xserver.te b/policy/modules/services/xserver.te
index 3f91fd9877874215de8746ffc4bf0a60ff4290c5..8cb530b248d35948e83d1f85c8eb34d30e1518db 100644 (file)
--- a/policy/modules/services/xserver.te
+++ b/policy/modules/services/xserver.te
@@ -437,6 +437,11 @@ manage_files_pattern(xdm_t, xkb_var_lib_t, xkb_var_lib_t)
 
 manage_files_pattern(xdm_t, xdm_home_t, xdm_home_t)
 userdom_user_home_dir_filetrans(xdm_t, xdm_home_t, file)
+userdom_user_home_dir_filetrans(xdm_t, iceauth_home_t, file, .DCOP)
+userdom_user_home_dir_filetrans(xdm_t, iceauth_home_t, file, .ICEauthority)
+userdom_user_home_dir_filetrans(xdm_t, xauth_home_t, file, .Xauthority)
+userdom_user_home_dir_filetrans(xdm_t, xauth_home_t, file, .xauth)
+userdom_user_home_dir_filetrans(xdm_t, xauth_home_t, file, .Xauth)
 
 #Handle mislabeled files in homedir
 userdom_delete_user_home_content_files(xdm_t)