From 6b99041e7459f8efb3d945ffef3603c7ddd88941 Mon Sep 17 00:00:00 2001 From: Miroslav Grepl Date: Wed, 21 Dec 2011 13:05:52 +0000 Subject: [PATCH] Boinc_clien needs to read/write nvidia dev --- policy/modules/services/boinc.te | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/policy/modules/services/boinc.te b/policy/modules/services/boinc.te index 788087e6..61b22fc9 100644 --- a/policy/modules/services/boinc.te +++ b/policy/modules/services/boinc.te @@ -50,6 +50,7 @@ corecmd_exec_shell(boinc_domain) dev_read_rand(boinc_domain) dev_read_urand(boinc_domain) dev_read_sysfs(boinc_domain) +dev_rw_xserver_misc(boinc_domain) domain_read_all_domains_state(boinc_domain) @@ -164,8 +165,6 @@ kernel_read_network_state(boinc_project_t) corenet_tcp_connect_boinc_port(boinc_project_t) -dev_rw_xserver_misc(boinc_project_t) - files_dontaudit_search_home(boinc_project_t) optional_policy(` -- 2.47.3