From a1b42052c9d43b9deaac64862f4c6db7bc7f54ed Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Wed, 1 Sep 2010 09:59:39 -0400 Subject: [PATCH] Fix mmap_zero assertion violation in xserver. --- policy/modules/services/xserver.te | 1 - 1 file changed, 1 deletion(-) diff --git a/policy/modules/services/xserver.te b/policy/modules/services/xserver.te index 78991883..58bae41b 100644 --- a/policy/modules/services/xserver.te +++ b/policy/modules/services/xserver.te @@ -599,7 +599,6 @@ allow xserver_t input_xevent_t:x_event send; allow xserver_t self:capability { dac_override fowner fsetid setgid setuid ipc_owner sys_rawio sys_admin sys_nice sys_tty_config mknod net_bind_service }; dontaudit xserver_t self:capability chown; allow xserver_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap }; -allow xserver_t self:memprotect mmap_zero; allow xserver_t self:fd use; allow xserver_t self:fifo_file rw_fifo_file_perms; allow xserver_t self:sock_file read_sock_file_perms;