Use relabel permission sets where possible.

This commit is contained in:
Dominick Grift 2010-09-16 10:45:36 +02:00
parent 9a2fd7d144
commit a3d20a3c3a

View File

@ -158,10 +158,10 @@ interface(`xserver_role',`
allow $2 xserver_tmpfs_t:file rw_file_perms; allow $2 xserver_tmpfs_t:file rw_file_perms;
allow $2 iceauth_home_t:file manage_file_perms; allow $2 iceauth_home_t:file manage_file_perms;
allow $2 iceauth_home_t:file { relabelfrom relabelto }; allow $2 iceauth_home_t:file relabel_file_perms;
allow $2 xauth_home_t:file manage_file_perms; allow $2 xauth_home_t:file manage_file_perms;
allow $2 xauth_home_t:file { relabelfrom relabelto }; allow $2 xauth_home_t:file relabel_file_perms;
mls_xwin_read_to_clearance($2) mls_xwin_read_to_clearance($2)
manage_dirs_pattern($2, user_fonts_t, user_fonts_t) manage_dirs_pattern($2, user_fonts_t, user_fonts_t)