rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

Implement screen-locking feature.

Browse Source 
Signed-off-by: Dominick Grift <domg472@gmail.com>
Signed-off-by: Chris PeBenito <cpebenito@tresys.com>
This commit is contained in:
Dominick Grift 2009-10-22 16:23:43 +02:00 committed by Chris PeBenito
parent 5b6bd09213
commit a92ee50126
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/apps/screen.if
View File

@ -44,6 +44,7 @@ template(`screen_role_template',`
# #
allow $1_screen_t self:capability { setuid setgid fsetid }; allow $1_screen_t self:capability { setuid setgid fsetid };
allow $1_screen_t self:fifo_file rw_fifo_file_perms;
allow $1_screen_t self:process signal_perms; allow $1_screen_t self:process signal_perms;
allow $1_screen_t self:tcp_socket create_stream_socket_perms; allow $1_screen_t self:tcp_socket create_stream_socket_perms;
allow $1_screen_t self:udp_socket create_socket_perms; allow $1_screen_t self:udp_socket create_socket_perms;
@ -117,6 +118,7 @@ template(`screen_role_template',`
fs_search_auto_mountpoints($1_screen_t) fs_search_auto_mountpoints($1_screen_t)
fs_getattr_xattr_fs($1_screen_t) fs_getattr_xattr_fs($1_screen_t)
auth_domtrans_chk_passwd($1_screen_t)
auth_use_nsswitch($1_screen_t) auth_use_nsswitch($1_screen_t)
auth_dontaudit_read_shadow($1_screen_t) auth_dontaudit_read_shadow($1_screen_t)
auth_dontaudit_exec_utempter($1_screen_t) auth_dontaudit_exec_utempter($1_screen_t)