Gentoo Archives: gentoo-commits

From: Jason Zaman <perfinion@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/
Date: Sun, 01 Jan 2017 16:36:52
Message-Id: 1483287988.72650f3e45abe1df97d416208d4472ae9956fd7a.perfinion@gentoo
1 commit: 72650f3e45abe1df97d416208d4472ae9956fd7a
2 Author: Chris PeBenito <pebenito <AT> ieee <DOT> org>
3 AuthorDate: Sun Dec 18 22:53:46 2016 +0000
4 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
5 CommitDate: Sun Jan 1 16:26:28 2017 +0000
6 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=72650f3e
7
8 xserver: Move interface definition.
9
10 policy/modules/services/xserver.if | 38 +++++++++++++++++++-------------------
11 1 file changed, 19 insertions(+), 19 deletions(-)
12
13 diff --git a/policy/modules/services/xserver.if b/policy/modules/services/xserver.if
14 index bebc419..c1d41b5 100644
15 --- a/policy/modules/services/xserver.if
16 +++ b/policy/modules/services/xserver.if
17 @@ -792,6 +792,25 @@ interface(`xserver_read_xdm_state',`
18
19 ########################################
20 ## <summary>
21 +## Set the priority of the X Display
22 +## Manager (XDM).
23 +## </summary>
24 +## <param name="domain">
25 +## <summary>
26 +## Domain allowed access.
27 +## </summary>
28 +## </param>
29 +#
30 +interface(`xserver_setsched_xdm',`
31 + gen_require(`
32 + type xdm_t;
33 + ')
34 +
35 + allow $1 xdm_t:process setsched;
36 +')
37 +
38 +########################################
39 +## <summary>
40 ## Create, read, write, and delete
41 ## xdm_spool files.
42 ## </summary>
43 @@ -1349,22 +1368,3 @@ interface(`xserver_unconfined',`
44 typeattribute $1 x_domain;
45 typeattribute $1 xserver_unconfined_type;
46 ')
47 -
48 -########################################
49 -## <summary>
50 -## Set the priority of the X Display
51 -## Manager (XDM).
52 -## </summary>
53 -## <param name="domain">
54 -## <summary>
55 -## Domain allowed access.
56 -## </summary>
57 -## </param>
58 -#
59 -interface(`xserver_setsched_xdm',`
60 - gen_require(`
61 - type xdm_t;
62 - ')
63 -
64 - allow $1 xdm_t:process setsched;
65 -')