rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

trunk, strict-targeted-merge: add mmap_zero to xserver domains.

Browse Source
This commit is contained in:
Chris PeBenito 2007-06-28 12:34:08 +00:00
parent f5842c1fa5
commit e5e55ace89
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
policy/modules/services/xserver.if
View File

@ -48,6 +48,7 @@ template(`xserver_common_domain_template',`
allow $1_xserver_t self:capability { dac_override fowner fsetid setgid setuid ipc_owner sys_rawio sys_admin sys_nice sys_tty_config mknod net_bind_service }; allow $1_xserver_t self:capability { dac_override fowner fsetid setgid setuid ipc_owner sys_rawio sys_admin sys_nice sys_tty_config mknod net_bind_service };
dontaudit $1_xserver_t self:capability chown; dontaudit $1_xserver_t self:capability chown;
allow $1_xserver_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap }; allow $1_xserver_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap };
allow $1_xserver_t self:memprotect mmap_zero;
allow $1_xserver_t self:fd use; allow $1_xserver_t self:fd use;
allow $1_xserver_t self:fifo_file rw_fifo_file_perms; allow $1_xserver_t self:fifo_file rw_fifo_file_perms;
allow $1_xserver_t self:sock_file read_sock_file_perms; allow $1_xserver_t self:sock_file read_sock_file_perms;
@ -126,6 +127,8 @@ template(`xserver_common_domain_template',`
dev_rw_input_dev($1_xserver_t) dev_rw_input_dev($1_xserver_t)
dev_rwx_zero($1_xserver_t) dev_rwx_zero($1_xserver_t)
domain_mmap_low($1_xserver_t)
files_read_etc_files($1_xserver_t) files_read_etc_files($1_xserver_t)
files_read_etc_runtime_files($1_xserver_t) files_read_etc_runtime_files($1_xserver_t)
files_read_usr_files($1_xserver_t) files_read_usr_files($1_xserver_t)

2
policy/modules/services/xserver.te
View File

@ -1,5 +1,5 @@
policy_module(xserver,1.4.2) policy_module(xserver,1.4.3)
######################################## ########################################
# #