[patch] gentoo portage patch for selinux-base-2.20220106-r2

sddm-revert.patch (text/plain), 2.21 KB, created by Alexander Wetzel on 2022-04-10 16:35:25 UTC

diff -ur a/refpolicy/config/appconfig-mcs/seusers a/refpolicy/config/appconfig-mcs/seusers
--- a/refpolicy/config/appconfig-mcs/seusers	2022-04-10 17:37:51.820977573 +0200
+++ a/refpolicy/config/appconfig-mcs/seusers	2022-04-10 17:40:03.103998641 +0200
@@ -1,3 +1,2 @@
 root:root:s0-mcs_systemhigh
 __default__:user_u:s0
-sddm:xdm:s0
Only in a/refpolicy/config/appconfig-mcs: xdm_default_contexts
diff -ur a/refpolicy/config/appconfig-mls/seusers a/refpolicy/config/appconfig-mls/seusers
--- a/refpolicy/config/appconfig-mls/seusers	2022-04-10 17:37:51.820977573 +0200
+++ a/refpolicy/config/appconfig-mls/seusers	2022-04-10 17:40:18.094803376 +0200
@@ -1,3 +1,2 @@
 root:root:s0-mls_systemhigh
 __default__:user_u:s0
-sddm:xdm:s0
Only in a/refpolicy/config/appconfig-mls: xdm_default_contexts
diff -ur a/refpolicy/config/appconfig-standard/seusers a/refpolicy/config/appconfig-standard/seusers
--- a/refpolicy/config/appconfig-standard/seusers	2022-04-10 17:37:51.820977573 +0200
+++ a/refpolicy/config/appconfig-standard/seusers	2022-04-10 17:40:26.594998983 +0200
@@ -1,3 +1,2 @@
 root:root
 __default__:user_u
-sddm:xdm:s0
Only in a/refpolicy/config/appconfig-standard: xdm_default_contexts
diff -ur a/refpolicy/policy/modules/services/xserver.te a/refpolicy/policy/modules/services/xserver.te
--- a/refpolicy/policy/modules/services/xserver.te	2022-04-10 17:37:51.990981487 +0200
+++ a/refpolicy/policy/modules/services/xserver.te	2022-04-10 17:43:53.600089438 +0200
@@ -62,10 +62,6 @@
 ## </desc>
 gen_tunable(xserver_allow_dri, false)
 
-# for sddm to use pam for greeter
-role xdm_r;
-allow system_r xdm_r;
-
 attribute x_domain;
 
 # X Events
@@ -149,7 +145,6 @@
 files_associate_tmp(xconsole_device_t)
 
 type xdm_t;
-role xdm_r types xdm_t;
 type xdm_exec_t;
 auth_login_pgm_domain(xdm_t)
 init_domain(xdm_t, xdm_exec_t)
@@ -848,9 +843,6 @@
 manage_lnk_files_pattern(xserver_t, xdm_tmp_t, xdm_tmp_t)
 manage_sock_files_pattern(xserver_t, xdm_tmp_t, xdm_tmp_t)
 
-# for sddm to use pam for greeter, sddm greeter needs execmod
-allow xdm_t xdm_tmpfs_t:file execmod;
-
 # Run Xorg.wrap
 can_exec(xserver_t, xserver_exec_t)
 
@@ -1054,6 +1046,3 @@
 		cgmanager_stream_connect(xdm_t)
 	')
 ')
-
-# for sddm to use pam for greeter
-gen_user(xdm,, xdm_r, s0, s0)