From a3d20a3c3a4988018e94a2619cf16d3fa2f64dc6 Mon Sep 17 00:00:00 2001 From: Dominick Grift Date: Thu, 16 Sep 2010 10:45:36 +0200 Subject: [PATCH] Use relabel permission sets where possible. --- policy/modules/services/xserver.if | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/policy/modules/services/xserver.if b/policy/modules/services/xserver.if index 8ed36f25..5efb6568 100644 --- a/policy/modules/services/xserver.if +++ b/policy/modules/services/xserver.if @@ -158,10 +158,10 @@ interface(`xserver_role',` allow $2 xserver_tmpfs_t:file rw_file_perms; allow $2 iceauth_home_t:file manage_file_perms; - allow $2 iceauth_home_t:file { relabelfrom relabelto }; + allow $2 iceauth_home_t:file relabel_file_perms; allow $2 xauth_home_t:file manage_file_perms; - allow $2 xauth_home_t:file { relabelfrom relabelto }; + allow $2 xauth_home_t:file relabel_file_perms; mls_xwin_read_to_clearance($2) manage_dirs_pattern($2, user_fonts_t, user_fonts_t)