From: domg472@gmail.com (Dominick Grift) Date: Sat, 15 May 2010 20:53:08 +0200 Subject: [refpolicy] Howto enable or disable clipboard with selinux? In-Reply-To: References: Message-ID: <4BEEED94.3050400@gmail.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 05/15/2010 07:50 PM, Shaz wrote: > Dear list, > > I want to enable or disable the clipboard with booleans. Is there any > available policy that can do this? If not please indicate the relevant place > to start with. There is no boolean to enable/disable clipboard functionality. You would have to enable the xserver access control extension (setsebool -P xserver_object_manager on && reboot) and modify the policy to grant/deny access to copy to and read from the clipboard. Which might not be easy to do. I forgot which classes and permissions control this and "XACE" provides plenty classes and permissions. I have, however, a while ago created a screen cast in which i demonstrate how to confine a GUI user app (google-gadgets) with the Xserver access control extension enabled. (it is on youtube "SELinux confined a GUI app". If i remember correct it also touches on the clipboard issue wrt google-gadgets. > > > > _______________________________________________ > refpolicy mailing list > refpolicy at oss.tresys.com > http://oss.tresys.com/mailman/listinfo/refpolicy -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 261 bytes Desc: OpenPGP digital signature Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100515/2da8ad37/attachment.bin