commit: fcd9103749c10057508ffd8efc08f3a4559c5e39
Author: Luis Ressel <aranea <AT> aixah <DOT> de>
AuthorDate: Wed Jun 4 15:12:40 2014 +0000
Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Tue Jun 10 18:14:28 2014 +0000
URL:
http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=fcd91037
Allow xdm_t to transition to shutdown_t domain
Several DMs offer the possibility to shutdown the system. I personally
don't think a bool is neccessary for this permission, but I wouldn't
oppose one either.
---
policy/modules/services/xserver.te | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/policy/modules/services/xserver.te
b/policy/modules/services/xserver.te
index 909782e..a3aa4bc 100644
--- a/policy/modules/services/xserver.te
+++ b/policy/modules/services/xserver.te
@@ -563,6 +563,10 @@ optional_policy(`
')
optional_policy(`
+ shutdown_domtrans(xdm_t)
+')
+
+optional_policy(`
udev_read_db(xdm_t)
')
