From: guido@trentalancia.com (Guido Trentalancia) Date: Sat, 16 Sep 2017 23:38:56 +0200 Subject: [refpolicy] [PATCH 5/6] wm: gnome-shell SELinux integration Message-ID: <1505597936.13203.46.camel@trentalancia.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Let the window manager read the general SELinux configuration files. Signed-off-by: Guido Trentalancia --- policy/modules/contrib/wm.te | 4 ++++ 1 file changed, 4 insertions(+) --- a/policy/modules/contrib/wm.te 2017-09-16 16:21:54.881402273 +0200 +++ b/policy/modules/contrib/wm.te 2017-09-16 21:15:03.513002967 +0200 @@ -70,6 +70,10 @@ miscfiles_read_fonts(wm_domain) miscfiles_read_generic_certs(wm_domain) miscfiles_read_localization(wm_domain) +selinux_get_enforce_mode(wm_domain) + +seutil_read_config(wm_domain) + udev_read_pid_files(wm_domain) # the following is needed by gnome-shell