From 36edcd0e47ea39881ae0554bc0591edc8202a52c Mon Sep 17 00:00:00 2001 From: Xin Ouyang Date: Tue, 11 Sep 2012 14:24:58 +0800 Subject: refpolicy: xconsole_device_t as a dev_node Signed-off-by: Xin Ouyang --- ...olicy-fix-xconsole_device_t-as-a-dev_node.patch | 24 ++++++++++++++++++++++ .../refpolicy/refpolicy_2.20120725.inc | 4 ++++ 2 files changed, 28 insertions(+) create mode 100644 recipes-security/refpolicy/refpolicy-2.20120725/poky-policy-fix-xconsole_device_t-as-a-dev_node.patch diff --git a/recipes-security/refpolicy/refpolicy-2.20120725/poky-policy-fix-xconsole_device_t-as-a-dev_node.patch b/recipes-security/refpolicy/refpolicy-2.20120725/poky-policy-fix-xconsole_device_t-as-a-dev_node.patch new file mode 100644 index 0000000..87ac790 --- /dev/null +++ b/recipes-security/refpolicy/refpolicy-2.20120725/poky-policy-fix-xconsole_device_t-as-a-dev_node.patch @@ -0,0 +1,24 @@ +Subject: [PATCH] fix xconsole_device_t as a dev_node. + +Upstream-Status: Inappropriate [only for Poky] + +Signed-off-by: Xin Ouyang +--- + policy/modules/services/xserver.te | 1 + + 1 files changed, 1 insertions(+), 0 deletions(-) + +diff --git a/policy/modules/services/xserver.te b/policy/modules/services/xserver.te +index d40f750..5bb97e9 100644 +--- a/policy/modules/services/xserver.te ++++ b/policy/modules/services/xserver.te +@@ -151,6 +151,7 @@ userdom_user_tmp_file(xauth_tmp_t) + # this is not actually a device, its a pipe + type xconsole_device_t; + files_type(xconsole_device_t) ++dev_node(xconsole_device_t) + fs_associate_tmpfs(xconsole_device_t) + files_associate_tmp(xconsole_device_t) + +-- +1.7.5.4 + diff --git a/recipes-security/refpolicy/refpolicy_2.20120725.inc b/recipes-security/refpolicy/refpolicy_2.20120725.inc index 3582ddf..54a571a 100644 --- a/recipes-security/refpolicy/refpolicy_2.20120725.inc +++ b/recipes-security/refpolicy/refpolicy_2.20120725.inc @@ -28,4 +28,8 @@ SRC_URI += "file://poky-policy-add-syslogd_t-to-trusted-object.patch \ file://poky-policy-fix-new-SELINUXMNT-in-sys.patch \ " +# Other policy fixes +SRC_URI += "file://poky-policy-fix-xconsole_device_t-as-a-dev_node.patch \ + " + include refpolicy_common.inc -- cgit v1.2.3-54-g00ecf