From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 4FE9C13832F for ; Wed, 17 Aug 2016 17:00:04 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id EABA921C170; Wed, 17 Aug 2016 17:00:01 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 2E19721C17B for ; Wed, 17 Aug 2016 17:00:01 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 1BA02340F25 for ; Wed, 17 Aug 2016 17:00:00 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id A4AED2453 for ; Wed, 17 Aug 2016 16:59:58 +0000 (UTC) From: "Jason Zaman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" Message-ID: <1471450964.25f1cbbdaedcf74f0b7af03fea89063e4e401c0f.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:next commit in: policy/modules/services/, policy/modules/system/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/services/xserver.fc policy/modules/services/xserver.te policy/modules/system/init.te policy/modules/system/udev.te policy/modules/system/userdomain.if X-VCS-Directories: policy/modules/system/ policy/modules/services/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: 25f1cbbdaedcf74f0b7af03fea89063e4e401c0f X-VCS-Branch: next Date: Wed, 17 Aug 2016 16:59:58 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: a1b3e312-177b-49a7-a247-b10b4e2ace09 X-Archives-Hash: 19728a5c52809c558d67ad3919b6b4d8 Message-ID: <20160817165958.1ziDCQKViRr5D6HCdSHEVhDrEVpVwEQ9mGV3zBN_eHQ@z> commit: 25f1cbbdaedcf74f0b7af03fea89063e4e401c0f Author: Chris PeBenito ieee org> AuthorDate: Sun Aug 14 18:34:19 2016 +0000 Commit: Jason Zaman gentoo org> CommitDate: Wed Aug 17 16:22:44 2016 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=25f1cbbd Update alsa module use from Guido Trentalancia. policy/modules/services/xserver.fc | 1 + policy/modules/services/xserver.te | 4 ++++ policy/modules/system/init.te | 2 +- policy/modules/system/udev.te | 2 +- policy/modules/system/userdomain.if | 4 ++-- 5 files changed, 9 insertions(+), 4 deletions(-) diff --git a/policy/modules/services/xserver.fc b/policy/modules/services/xserver.fc index a531dba..4cbba44 100644 --- a/policy/modules/services/xserver.fc +++ b/policy/modules/services/xserver.fc @@ -75,6 +75,7 @@ HOME_DIR/\.Xauthority.* -- gen_context(system_u:object_r:xauth_home_t,s0) /usr/lib/xorg/Xorg\.wrap -- gen_context(system_u:object_r:xserver_exec_t,s0) /usr/lib/xorg-server/Xorg -- gen_context(system_u:object_r:xserver_exec_t,s0) /usr/lib/xorg-server/Xorg\.wrap -- gen_context(system_u:object_r:xserver_exec_t,s0) +/usr/lib/X11/xdm/Xsession -- gen_context(system_u:object_r:xsession_exec_t,s0) /usr/sbin/lightdm -- gen_context(system_u:object_r:xdm_exec_t,s0) diff --git a/policy/modules/services/xserver.te b/policy/modules/services/xserver.te index ca4be69..4f9826c 100644 --- a/policy/modules/services/xserver.te +++ b/policy/modules/services/xserver.te @@ -507,6 +507,10 @@ optional_policy(` ') optional_policy(` + colord_dbus_chat(xdm_t) +') + +optional_policy(` consolekit_dbus_chat(xdm_t) ') diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te index 0d4f74a..f646a93 100644 --- a/policy/modules/system/init.te +++ b/policy/modules/system/init.te @@ -697,7 +697,7 @@ ifdef(`distro_redhat',` miscfiles_read_hwdata(initrc_t) optional_policy(` - alsa_manage_rw_config(initrc_t) + alsa_manage_config(initrc_t) ') optional_policy(` diff --git a/policy/modules/system/udev.te b/policy/modules/system/udev.te index a7e918b..cc724ea 100644 --- a/policy/modules/system/udev.te +++ b/policy/modules/system/udev.te @@ -234,7 +234,7 @@ ifdef(`init_systemd',` optional_policy(` alsa_domtrans(udev_t) alsa_read_lib(udev_t) - alsa_read_rw_config(udev_t) + alsa_read_config(udev_t) ') optional_policy(` diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if index f0b4778..534a249 100644 --- a/policy/modules/system/userdomain.if +++ b/policy/modules/system/userdomain.if @@ -603,7 +603,7 @@ template(`userdom_common_user_template',` optional_policy(` alsa_home_filetrans_alsa_home($1_t, file, ".asoundrc") alsa_manage_home_files($1_t) - alsa_read_rw_config($1_t) + alsa_read_config($1_t) alsa_relabel_home_files($1_t) ') @@ -982,7 +982,7 @@ template(`userdom_restricted_xwindows_user_template',` xserver_restricted_role($1_r, $1_t) optional_policy(` - alsa_read_rw_config($1_t) + alsa_read_config($1_t) ') optional_policy(`