From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Tue, 8 Nov 2011 08:59:10 -0500
Subject: [refpolicy] xconsole and related stuff patch
In-Reply-To: <201111072346.45878.russell@coker.com.au>
References: <201111072346.45878.russell@coker.com.au>
Message-ID: <4EB935AE.10106@tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 11/07/11 07:46, Russell Coker wrote:
> The attached patch moves the xconsole policy to logging.pp from the xserver 
> policy.  It's more about logging than the X server and there are a lot of 
> systems which have syslogd configured to write to /dev/xconsole but that have 
> no X server installed.

I'm afraid I don't agree; its still associated with display on X, even without a functioning X server.  When you say that there are lot of systems with syslogd using xconsole, are you referring to Debian systems?  The last time I remember seeing any system using xconsole in any fashion was a long time ago, but I don't use Debian.
 
> Also included some changes to init.te which are specific to Debian and 
> Postfix.

It looks like there are some problems with encapsulation breakage and whitespace errors (spaces vs tabs).

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com