]> git.ipfire.org Git - people/stevee/selinux-policy.git/commit
projects / people / stevee / selinux-policy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4f8ee1f) | patch
Xserver: Removed rules that allowed xdm_t to use systemd_logind
authorDominick Grift <domg472@gmail.com>
Fri, 15 Jul 2011 17:33:40 +0000 (19:33 +0200)
committerDominick Grift <domg472@gmail.com>
Fri, 15 Jul 2011 17:33:40 +0000 (19:33 +0200)
commitfa22cd23379b175665a0e8a89256f6563a95b3aa
treea79dba7c75835265e017d4b3d80bb1d57f6e2729tree
parent4f8ee1f91cae999b74a4234fc145f614bd2e6f2bcommit | diff
Xserver: Removed rules that allowed xdm_t to use systemd_logind
/run/systemd/sessions/.* fifo_file descriptor, as that access is now
added to authlogin_pgm_domain (which xdm is)

The following calls in authlogin_pgm_domain are optional ( you may be
using upstart or sysvinit or whatever and my not have the systemd module
installed )

systemd_use_fds_logind($1)
systemd_write_inherited_logind_sessions_pipes($1)
policy/modules/services/xserver.te diff | blob | blame | history
policy/modules/system/authlogin.if diff | blob | blame | history
The IPFire selinux policy.