2017-09-16 21:38:56

by Guido Trentalancia

Subject: [refpolicy] [PATCH 5/6] wm: gnome-shell SELinux integration

Let the window manager read the general SELinux configuration
files.

Signed-off-by: Guido Trentalancia <[email protected]>
---
policy/modules/contrib/wm.te | 4 ++++
1 file changed, 4 insertions(+)

--- a/policy/modules/contrib/wm.te 2017-09-16 16:21:54.881402273 +0200
+++ b/policy/modules/contrib/wm.te 2017-09-16 21:15:03.513002967 +0200
@@ -70,6 +70,10 @@ miscfiles_read_fonts(wm_domain)
miscfiles_read_generic_certs(wm_domain)
miscfiles_read_localization(wm_domain)

+selinux_get_enforce_mode(wm_domain)
+
+seutil_read_config(wm_domain)
+
udev_read_pid_files(wm_domain)

# the following is needed by gnome-shell

2017-09-17 14:29:43

by Chris PeBenito

Subject: [refpolicy] [PATCH 5/6] wm: gnome-shell SELinux integration

On 09/16/2017 05:38 PM, Guido Trentalancia via refpolicy wrote:
> Let the window manager read the general SELinux configuration
> files.
>
> Signed-off-by: Guido Trentalancia <[email protected]>
> ---
> policy/modules/contrib/wm.te | 4 ++++
> 1 file changed, 4 insertions(+)
>
> --- a/policy/modules/contrib/wm.te 2017-09-16 16:21:54.881402273 +0200
> +++ b/policy/modules/contrib/wm.te 2017-09-16 21:15:03.513002967 +0200
> @@ -70,6 +70,10 @@ miscfiles_read_fonts(wm_domain)
> miscfiles_read_generic_certs(wm_domain)
> miscfiles_read_localization(wm_domain)
>
> +selinux_get_enforce_mode(wm_domain)
> +
> +seutil_read_config(wm_domain)
> +
> udev_read_pid_files(wm_domain)
>
> # the following is needed by gnome-shell


Merged.

--
Chris PeBenito