Changeset 2647

Show
Ignore:
Timestamp:
03/20/08 18:46:46 (9 months ago)
Author:
ewalsh
Message:

xselinux: Add new property append permission to allow rules.

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • branches/xselinux/policy/modules/services/xserver.if

    r2642 r2647  
    500500 
    501501        # xrdb X11:ChangeProperty prop=RESOURCE_MANAGER 
    502         allow $2 info_xproperty_t:x_property { create write }; 
     502        allow $2 info_xproperty_t:x_property { create write append }; 
    503503 
    504504        mls_xwin_read_to_clearance($1_xserver_t) 
    …… 
    762762        # X Properties 
    763763        # can read and write client properties 
    764         allow $3 $2_xproperty_t:x_property { create destroy read write }; 
     764        allow $3 $2_xproperty_t:x_property { create destroy read write append }; 
    765765        type_transition $3 xproperty_t:x_property $2_xproperty_t; 
    766766        # can read and write cut buffers 
    767         allow $3 clipboard_xproperty_t:x_property { create read write }; 
     767        allow $3 clipboard_xproperty_t:x_property { create read write append }; 
    768768        # can read info properties 
    769769        allow $3 info_xproperty_t:x_property read;