Dontaudit access_check for all files from xdm_t, it runs gnome-shell

diff --git a/policy/modules/kernel/corecommands.fc b/policy/modules/kernel/corecommands.fc
index 7bcafeac6d0596bfd7557398b8c86ede7b9c93ac..0b0896bb1ee41507f218c58c9a6122da2df9217f 100644 (file)
--- a/policy/modules/kernel/corecommands.fc
+++ b/policy/modules/kernel/corecommands.fc
@@ -302,6 +302,7 @@ ifdef(`distro_gentoo',`
 /usr/share/shorewall6-lite(/.*)?       gen_context(system_u:object_r:bin_t,s0)
 /usr/share/spamassassin/sa-update\.cron gen_context(system_u:object_r:bin_t,s0)
 /usr/share/turboprint/lib(/.*)?        --      gen_context(system_u:object_r:bin_t,s0)
+/usr/share/tucan.*/tucan.py    --      gen_context(system_u:object_r:bin_t,s0)
 /usr/share/vhostmd/scripts(/.*)?       gen_context(system_u:object_r:bin_t,s0)
 /usr/share/virtualbox/.*\.sh           gen_context(system_u:object_r:bin_t,s0)
 /usr/share/wicd/daemon(/.*)?           gen_context(system_u:object_r:bin_t,s0)

diff --git a/policy/modules/services/xserver.te b/policy/modules/services/xserver.te
index 743ea2be872fefb102af1408c8fb074a364cf352..611ee4c9ecd277cb89b478fc272fdd0599fa9636 100644 (file)
--- a/policy/modules/services/xserver.te
+++ b/policy/modules/services/xserver.te
@@ -614,6 +614,7 @@ files_dontaudit_access_check_etc(xdm_t)
 files_dontaudit_getattr_all_dirs(xdm_t)
 files_dontaudit_getattr_all_symlinks(xdm_t)
 files_dontaudit_getattr_all_tmp_sockets(xdm_t)
+files_dontaudit_all_access_check(xdm_t)
 
 fs_getattr_all_fs(xdm_t)
 fs_search_auto_mountpoints(xdm_t)