From: dwalsh@redhat.com (Daniel J Walsh)
Date: Fri, 28 Aug 2009 15:55:08 -0400
Subject: [refpolicy] admin_vbetool.patch
Message-ID: <4A98361C.5050502@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

http://people.fedoraproject.org/~dwalsh/SELinux/F12/admin_vbetool.patch
http://people.fedoraproject.org/~dwalsh/SELinux/F12/kernel_domain.patch
vbetool needs dac_override, and writes to sysfs also needs to rw xservice misc devices and mtrr device

Want to add a boolean oh wheter mmap_low_allowed

vbetool writes and execs content in the /var/run/xserver directories.