trunk: MLS constraints for the x_selection class, from Eamon Walsh.
This commit is contained in:
parent
cca4a215fe
commit
16fd1fd814
@ -1,3 +1,4 @@
|
|||||||
|
- MLS constraints for the x_selection class, from Eamon Walsh.
|
||||||
- Postgresql updates from KaiGai Kohei.
|
- Postgresql updates from KaiGai Kohei.
|
||||||
- Milter state directory patch from Paul Howarth.
|
- Milter state directory patch from Paul Howarth.
|
||||||
- Add MLS constrains for ingress/egress and secmark from Paul Moore.
|
- Add MLS constrains for ingress/egress and secmark from Paul Moore.
|
||||||
|
19
policy/mls
19
policy/mls
@ -515,6 +515,25 @@ mlsconstrain x_property { create destroy write append setattr }
|
|||||||
( t1 == mlsxwinwrite ));
|
( t1 == mlsxwinwrite ));
|
||||||
|
|
||||||
|
|
||||||
|
#
|
||||||
|
# MLS policy for the x_selection class
|
||||||
|
#
|
||||||
|
|
||||||
|
# the x_selection "read" ops (implicit single level)
|
||||||
|
mlsconstrain x_selection { read getattr }
|
||||||
|
(( l1 dom l2 ) or
|
||||||
|
(( t1 == mlsxwinreadtoclr ) and ( h1 dom l2 )) or
|
||||||
|
( t1 == mlsxwinreadselection ) or
|
||||||
|
( t1 == mlsxwinread ));
|
||||||
|
|
||||||
|
# the x_selection "write" ops (implicit single level)
|
||||||
|
mlsconstrain x_selection { write setattr }
|
||||||
|
(( l1 eq l2 ) or
|
||||||
|
(( t1 == mlsxwinwritetoclr ) and ( h1 dom l2 ) and ( l1 domby l2 )) or
|
||||||
|
( t1 == mlsxwinwriteselection ) or
|
||||||
|
( t1 == mlsxwinwrite ));
|
||||||
|
|
||||||
|
|
||||||
#
|
#
|
||||||
# MLS policy for the x_cursor class
|
# MLS policy for the x_cursor class
|
||||||
#
|
#
|
||||||
|
@ -42,6 +42,8 @@ attribute mlsxwinwrite;
|
|||||||
attribute mlsxwinwritetoclr;
|
attribute mlsxwinwritetoclr;
|
||||||
attribute mlsxwinreadproperty;
|
attribute mlsxwinreadproperty;
|
||||||
attribute mlsxwinwriteproperty;
|
attribute mlsxwinwriteproperty;
|
||||||
|
attribute mlsxwinreadselection;
|
||||||
|
attribute mlsxwinwriteselection;
|
||||||
attribute mlsxwinreadcolormap;
|
attribute mlsxwinreadcolormap;
|
||||||
attribute mlsxwinwritecolormap;
|
attribute mlsxwinwritecolormap;
|
||||||
attribute mlsxwinwritexinput;
|
attribute mlsxwinwritexinput;
|
||||||
|
Loading…
Reference in New Issue
Block a user