|
Lines 62-71
Link Here
|
| 62 |
## </desc> |
62 |
## </desc> |
| 63 |
gen_tunable(xserver_allow_dri, false) |
63 |
gen_tunable(xserver_allow_dri, false) |
| 64 |
|
64 |
|
| 65 |
# for sddm to use pam for greeter |
|
|
| 66 |
role xdm_r; |
| 67 |
allow system_r xdm_r; |
| 68 |
|
| 69 |
attribute x_domain; |
65 |
attribute x_domain; |
| 70 |
|
66 |
|
| 71 |
# X Events |
67 |
# X Events |
|
Lines 149-155
Link Here
|
| 149 |
files_associate_tmp(xconsole_device_t) |
145 |
files_associate_tmp(xconsole_device_t) |
| 150 |
|
146 |
|
| 151 |
type xdm_t; |
147 |
type xdm_t; |
| 152 |
role xdm_r types xdm_t; |
|
|
| 153 |
type xdm_exec_t; |
148 |
type xdm_exec_t; |
| 154 |
auth_login_pgm_domain(xdm_t) |
149 |
auth_login_pgm_domain(xdm_t) |
| 155 |
init_domain(xdm_t, xdm_exec_t) |
150 |
init_domain(xdm_t, xdm_exec_t) |
|
Lines 848-856
Link Here
|
| 848 |
manage_lnk_files_pattern(xserver_t, xdm_tmp_t, xdm_tmp_t) |
843 |
manage_lnk_files_pattern(xserver_t, xdm_tmp_t, xdm_tmp_t) |
| 849 |
manage_sock_files_pattern(xserver_t, xdm_tmp_t, xdm_tmp_t) |
844 |
manage_sock_files_pattern(xserver_t, xdm_tmp_t, xdm_tmp_t) |
| 850 |
|
845 |
|
| 851 |
# for sddm to use pam for greeter, sddm greeter needs execmod |
|
|
| 852 |
allow xdm_t xdm_tmpfs_t:file execmod; |
| 853 |
|
| 854 |
# Run Xorg.wrap |
846 |
# Run Xorg.wrap |
| 855 |
can_exec(xserver_t, xserver_exec_t) |
847 |
can_exec(xserver_t, xserver_exec_t) |
| 856 |
|
848 |
|
|
Lines 1054-1059
Link Here
|
| 1054 |
cgmanager_stream_connect(xdm_t) |
1046 |
cgmanager_stream_connect(xdm_t) |
| 1055 |
') |
1047 |
') |
| 1056 |
') |
1048 |
') |
| 1057 |
|
|
|
| 1058 |
# for sddm to use pam for greeter |
| 1059 |
gen_user(xdm,, xdm_r, s0, s0) |
