From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Tue, 11 Aug 2009 08:18:40 -0400
Subject: [refpolicy] new_device_permissions.patch
In-Reply-To: <4A809F60.1090805@tycho.nsa.gov>
References: <4A39A962.1000307@tycho.nsa.gov> <4A809F60.1090805@tycho.nsa.gov>
Message-ID: <1249993123.27712.13.camel@gorn>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Mon, 2009-08-10 at 18:29 -0400, Eamon Walsh wrote:
> On 06/17/2009 10:41 PM, Eamon Walsh wrote:
> > Add a few new permissions to the "x_device" class to support the new
> XI2
> > functionality just merged to the X server.
> >
> >    
> 
> 
> In the previous patch 2 x_device permission bits for the XI2 
> functionality were left out.
> 
> Fixed with attached patch.

Whats the difference between add/remove and create/destroy?

> Index: policy/flask/access_vectors
> ===================================================================
> --- policy/flask/access_vectors (revision 3012)
> +++ policy/flask/access_vectors (working copy)
> @@ -544,6 +544,8 @@
>         set_property
>         add
>         remove
> +       create
> +       destroy
>  }
>  
>  class x_server
-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150