commit: fcd9103749c10057508ffd8efc08f3a4559c5e39 Author: Luis Ressel <aranea <AT> aixah <DOT> de> AuthorDate: Wed Jun 4 15:12:40 2014 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Tue Jun 10 18:14:28 2014 +0000 URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=fcd91037
Allow xdm_t to transition to shutdown_t domain Several DMs offer the possibility to shutdown the system. I personally don't think a bool is neccessary for this permission, but I wouldn't oppose one either. --- policy/modules/services/xserver.te | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/policy/modules/services/xserver.te b/policy/modules/services/xserver.te index 909782e..a3aa4bc 100644 --- a/policy/modules/services/xserver.te +++ b/policy/modules/services/xserver.te @@ -563,6 +563,10 @@ optional_policy(` ') optional_policy(` + shutdown_domtrans(xdm_t) +') + +optional_policy(` udev_read_db(xdm_t) ')