refpolicy: xconsole_device_t as a dev_node

Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>

2 files changed, 28 insertions, 0 deletions

diff --git a/recipes-security/refpolicy/refpolicy-2.20120725/poky-policy-fix-xconsole_device_t-as-a-dev_node.patch b/recipes-security/refpolicy/refpolicy-2.20120725/poky-policy-fix-xconsole_device_t-as-a-dev_node.patch
new file mode 100644
index 0000000..87ac790
--- /dev/null
+++ b/recipes-security/refpolicy/refpolicy-2.20120725/poky-policy-fix-xconsole_device_t-as-a-dev_node.patch
@@ -0,0 +1,24 @@
+Subject: [PATCH] fix xconsole_device_t as a dev_node.
+
+Upstream-Status: Inappropriate [only for Poky]
+
+Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
+---
+ policy/modules/services/xserver.te |    1 +
+ 1 files changed, 1 insertions(+), 0 deletions(-)
+
+diff --git a/policy/modules/services/xserver.te b/policy/modules/services/xserver.te
+index d40f750..5bb97e9 100644
+--- a/policy/modules/services/xserver.te
++++ b/policy/modules/services/xserver.te
+@@ -151,6 +151,7 @@ userdom_user_tmp_file(xauth_tmp_t)
+ # this is not actually a device, its a pipe
+ type xconsole_device_t;
+ files_type(xconsole_device_t)
++dev_node(xconsole_device_t)
+ fs_associate_tmpfs(xconsole_device_t)
+ files_associate_tmp(xconsole_device_t)
+ 
+-- 
+1.7.5.4
+
diff --git a/recipes-security/refpolicy/refpolicy_2.20120725.inc b/recipes-security/refpolicy/refpolicy_2.20120725.inc
index 3582ddf..54a571a 100644
--- a/recipes-security/refpolicy/refpolicy_2.20120725.inc
+++ b/recipes-security/refpolicy/refpolicy_2.20120725.inc
@@ -28,4 +28,8 @@ SRC_URI += "file://poky-policy-add-syslogd_t-to-trusted-object.patch \
             file://poky-policy-fix-new-SELINUXMNT-in-sys.patch \
            "
 
+# Other policy fixes 
+SRC_URI += "file://poky-policy-fix-xconsole_device_t-as-a-dev_node.patch \
+           "
+
 include refpolicy_common.inc