aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRussell Coker <russell@coker.com.au>2019-01-11 21:30:43 +1100
committerJason Zaman <jason@perfinion.com>2019-02-10 12:11:25 +0800
commitcc15d9c44617bf71a32ca6bceb3cc35bf473a623 (patch)
treea0728e8240ad5536f9761a3826e15748587d9c89 /policy/modules/services/xserver.if
parentinit: rename *_pid_* interfaces to use "runtime" (diff)
downloadhardened-refpolicy-cc15d9c44617bf71a32ca6bceb3cc35bf473a623.tar.gz
hardened-refpolicy-cc15d9c44617bf71a32ca6bceb3cc35bf473a623.tar.bz2
hardened-refpolicy-cc15d9c44617bf71a32ca6bceb3cc35bf473a623.zip
some little stuff
Tiny and I think they are all obvious. Signed-off-by: Jason Zaman <jason@perfinion.com>
Diffstat (limited to 'policy/modules/services/xserver.if')
-rw-r--r--policy/modules/services/xserver.if18
1 files changed, 18 insertions, 0 deletions
diff --git a/policy/modules/services/xserver.if b/policy/modules/services/xserver.if
index ec944672b..854f3b905 100644
--- a/policy/modules/services/xserver.if
+++ b/policy/modules/services/xserver.if
@@ -1634,6 +1634,24 @@ interface(`xserver_rw_xdm_keys',`
########################################
## <summary>
+## Manage keys for xdm.
+## </summary>
+## <param name="domain">
+## <summary>
+## Domain allowed access.
+## </summary>
+## </param>
+#
+interface(`xserver_link_xdm_keys',`
+ gen_require(`
+ type xdm_t;
+ ')
+
+ allow $1 xdm_t:key link;
+')
+
+########################################
+## <summary>
## Read and write the mesa shader cache.
## </summary>
## <param name="domain">