#
# Config file for XSELinux extension
#


#
##
### Rules for X Clients
##
#

#
# The default client rule defines a context to be used for all clients
# connecting to the server from a remote host.
#
client	*				system_u:object_r:remote_xclient_t


#
##
### Rules for X Properties
##
#

#
# Property rules map a property name to a context.  A default property
# rule indicated by an asterisk should follow all other property rules.
#
# Properties that normal clients may only read
property XFree86_VT			system_u:object_r:info_xproperty_t
property XFree86_DDC_EDID1_RAWDATA	system_u:object_r:info_xproperty_t
property RESOURCE_MANAGER		system_u:object_r:info_xproperty_t
property SCREEN_RESOURCES		system_u:object_r:info_xproperty_t
property _MIT_PRIORITY_COLORS		system_u:object_r:info_xproperty_t
property AT_SPI_IOR			system_u:object_r:info_xproperty_t
property _SELINUX_CLIENT_CONTEXT	system_u:object_r:info_xproperty_t
property _NET_WORKAREA			system_u:object_r:info_xproperty_t
property _XKB_RULES_NAMES		system_u:object_r:info_xproperty_t

# Clipboard and selection properties
property CUT_BUFFER0			system_u:object_r:clipboard_xproperty_t
property CUT_BUFFER1			system_u:object_r:clipboard_xproperty_t
property CUT_BUFFER2			system_u:object_r:clipboard_xproperty_t
property CUT_BUFFER3			system_u:object_r:clipboard_xproperty_t
property CUT_BUFFER4			system_u:object_r:clipboard_xproperty_t
property CUT_BUFFER5			system_u:object_r:clipboard_xproperty_t
property CUT_BUFFER6			system_u:object_r:clipboard_xproperty_t
property CUT_BUFFER7			system_u:object_r:clipboard_xproperty_t

# Default fallback type
property *	   			system_u:object_r:xproperty_t


#
##
### Rules for X Extensions
##
#

#
# Extension rules map an extension name to a context.  A default extension
# rule indicated by an asterisk should follow all other extension rules.
#
# Standard extensions
extension BIG-REQUESTS			system_u:object_r:std_xext_t
extension SHAPE				system_u:object_r:std_xext_t
extension SYNC				system_u:object_r:std_xext_t
extension XC-MISC			system_u:object_r:std_xext_t
extension XFIXES			system_u:object_r:std_xext_t
extension XInputExtension		system_u:object_r:std_xext_t
extension XKEYBOARD			system_u:object_r:std_xext_t
extension DAMAGE			system_u:object_r:std_xext_t
extension RENDER			system_u:object_r:std_xext_t
extension XINERAMA			system_u:object_r:std_xext_t

# Direct hardware access extensions
extension XFree86-DGA			system_u:object_r:directhw_xext_t
extension XFree86-VidModeExtension	system_u:object_r:directhw_xext_t

# Screen management and multihead extensions
extension RANDR				system_u:object_r:output_xext_t
extension Composite			system_u:object_r:output_xext_t

# Screensaver, power management extensions
extension DPMS				system_u:object_r:screensaver_xext_t
extension MIT-SCREEN-SAVER		system_u:object_r:screensaver_xext_t

# Shared memory extensions
extension MIT-SHM			system_u:object_r:shmem_xext_t
extension XFree86-Bigfont		system_u:object_r:shmem_xext_t

# Accelerated graphics, OpenGL, direct rendering extensions
extension GLX				system_u:object_r:accelgraphics_xext_t
extension NV-CONTROL			system_u:object_r:accelgraphics_xext_t
extension NV-GLX			system_u:object_r:accelgraphics_xext_t
extension NVIDIA-GLX			system_u:object_r:accelgraphics_xext_t

# Debugging, testing, and recording extensions
extension RECORD			system_u:object_r:debug_xext_t
extension X-Resource			system_u:object_r:debug_xext_t
extension XTEST				system_u:object_r:debug_xext_t

# Security-related extensions
extension SECURITY			system_u:object_r:security_xext_t
extension SELinux			system_u:object_r:security_xext_t
extension XAccessControlExtension	system_u:object_r:security_xext_t
extension XC-APPGROUP			system_u:object_r:security_xext_t

# Video extensions
extension XVideo			system_u:object_r:video_xext_t
extension XVideo-MotionCompensation	system_u:object_r:video_xext_t

# Default fallback type
extension *	   			system_u:object_r:xext_t


#
##
### Rules for X Selections
##
#

# Selection rules map a selection name to a context.  A default selection
# rule indicated by an asterisk should follow all other selection rules.
#
# Standard selections
selection XA_PRIMARY			system_u:object_r:clipboard_xselection_t
selection XA_SECONDARY			system_u:object_r:clipboard_xselection_t
selection PRIMARY			system_u:object_r:clipboard_xselection_t
selection CLIPBOARD			system_u:object_r:clipboard_xselection_t

# Default fallback type
selection *				system_u:object_r:xselection_t


#
##
### Rules for X Events
##
#

#
# Event rules map an event protocol name to a context.  A default event
# rule indicated by an asterisk should follow all other event rules.
#
# Input events
event X11:KeyPress			system_u:object_r:input_xevent_t
event X11:KeyRelease			system_u:object_r:input_xevent_t
event X11:ButtonPress			system_u:object_r:input_xevent_t
event X11:ButtonRelease			system_u:object_r:input_xevent_t
event X11:MotionNotify			system_u:object_r:input_xevent_t
event X11:SelectionNotify		system_u:object_r:input_xevent_t
event XInputExtension:DeviceKeyPress	system_u:object_r:input_xevent_t
event XInputExtension:DeviceKeyRelease	system_u:object_r:input_xevent_t
event XInputExtension:DeviceButtonPress	system_u:object_r:input_xevent_t
event XInputExtension:DeviceButtonRelease	system_u:object_r:input_xevent_t
event XInputExtension:DeviceMotionNotify	system_u:object_r:input_xevent_t
event XInputExtension:DeviceValuator	system_u:object_r:input_xevent_t
event XInputExtension:ProximityIn	system_u:object_r:input_xevent_t
event XInputExtension:ProximityOut	system_u:object_r:input_xevent_t

# Focus events
event X11:FocusIn			system_u:object_r:focus_xevent_t
event X11:FocusOut			system_u:object_r:focus_xevent_t
event X11:EnterNotify			system_u:object_r:focus_xevent_t
event X11:LeaveNotify			system_u:object_r:focus_xevent_t

# Property events
event X11:PropertyNotify		system_u:object_r:property_xevent_t

# Client message events
event X11:ClientMessage			system_u:object_r:client_xevent_t

# Manager events
event X11:ConfigureRequest		system_u:object_r:manage_xevent_t
event X11:ResizeRequest			system_u:object_r:manage_xevent_t
event X11:MapRequest			system_u:object_r:manage_xevent_t
event X11:CirculateRequest		system_u:object_r:manage_xevent_t
event X11:CreateNotify			system_u:object_r:manage_xevent_t
event X11:DestroyNotify			system_u:object_r:manage_xevent_t
event X11:MapNotify			system_u:object_r:manage_xevent_t
event X11:UnmapNotify			system_u:object_r:manage_xevent_t
event X11:ReparentNotify		system_u:object_r:manage_xevent_t
event X11:ConfigureNotify		system_u:object_r:manage_xevent_t
event X11:GravityNotify			system_u:object_r:manage_xevent_t
event X11:CirculateNotify		system_u:object_r:manage_xevent_t
event X11:Expose			system_u:object_r:manage_xevent_t
event X11:VisibilityNotify		system_u:object_r:manage_xevent_t

# Unknown events (that are not registered in the X server's name database)
event <unknown>				system_u:object_r:unknown_xevent_t

# Default fallback type
event *					system_u:object_r:xevent_t