Use relabel permission sets where possible.
This commit is contained in:
parent
9a2fd7d144
commit
a3d20a3c3a
@ -158,10 +158,10 @@ interface(`xserver_role',`
|
|||||||
allow $2 xserver_tmpfs_t:file rw_file_perms;
|
allow $2 xserver_tmpfs_t:file rw_file_perms;
|
||||||
|
|
||||||
allow $2 iceauth_home_t:file manage_file_perms;
|
allow $2 iceauth_home_t:file manage_file_perms;
|
||||||
allow $2 iceauth_home_t:file { relabelfrom relabelto };
|
allow $2 iceauth_home_t:file relabel_file_perms;
|
||||||
|
|
||||||
allow $2 xauth_home_t:file manage_file_perms;
|
allow $2 xauth_home_t:file manage_file_perms;
|
||||||
allow $2 xauth_home_t:file { relabelfrom relabelto };
|
allow $2 xauth_home_t:file relabel_file_perms;
|
||||||
|
|
||||||
mls_xwin_read_to_clearance($2)
|
mls_xwin_read_to_clearance($2)
|
||||||
manage_dirs_pattern($2, user_fonts_t, user_fonts_t)
|
manage_dirs_pattern($2, user_fonts_t, user_fonts_t)
|
||||||
|
Loading…
Reference in New Issue
Block a user