commit: 72650f3e45abe1df97d416208d4472ae9956fd7a
Author: Chris PeBenito <pebenito <AT> ieee <DOT> org>
AuthorDate: Sun Dec 18 22:53:46 2016 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sun Jan 1 16:26:28 2017 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=72650f3e
xserver: Move interface definition.
policy/modules/services/xserver.if | 38 +++++++++++++++++++-------------------
1 file changed, 19 insertions(+), 19 deletions(-)
diff --git a/policy/modules/services/xserver.if
b/policy/modules/services/xserver.if
index bebc419..c1d41b5 100644
--- a/policy/modules/services/xserver.if
+++ b/policy/modules/services/xserver.if
@@ -792,6 +792,25 @@ interface(`xserver_read_xdm_state',`
########################################
## <summary>
+## Set the priority of the X Display
+## Manager (XDM).
+## </summary>
+## <param name="domain">
+## <summary>
+## Domain allowed access.
+## </summary>
+## </param>
+#
+interface(`xserver_setsched_xdm',`
+ gen_require(`
+ type xdm_t;
+ ')
+
+ allow $1 xdm_t:process setsched;
+')
+
+########################################
+## <summary>
## Create, read, write, and delete
## xdm_spool files.
## </summary>
@@ -1349,22 +1368,3 @@ interface(`xserver_unconfined',`
typeattribute $1 x_domain;
typeattribute $1 xserver_unconfined_type;
')
-
-########################################
-## <summary>
-## Set the priority of the X Display
-## Manager (XDM).
-## </summary>
-## <param name="domain">
-## <summary>
-## Domain allowed access.
-## </summary>
-## </param>
-#
-interface(`xserver_setsched_xdm',`
- gen_require(`
- type xdm_t;
- ')
-
- allow $1 xdm_t:process setsched;
-')
