Allow sddm-helper running as xdm_t to create .wayland-errors with cor…

…rect labeling. BZ(#1291085)
fedora-selinux · Dec 22, 2015 · 459edcb · 459edcb
1 parent e4ddb84
commit 459edcb
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/policy/modules/services/xserver.fc b/policy/modules/services/xserver.fc
@@ -16,6 +16,7 @@ HOME_DIR/\.Xauth.*	--	gen_context(system_u:object_r:xauth_home_t,s0)
 HOME_DIR/\.Xauthority.*	--	gen_context(system_u:object_r:xauth_home_t,s0)
 HOME_DIR/\.cache/gdm(/.*)?	gen_context(system_u:object_r:xdm_home_t,s0)
 HOME_DIR/\.xsession-errors.*	--	gen_context(system_u:object_r:xdm_home_t,s0)
+HOME_DIR/\.wayland-errors.*	--	gen_context(system_u:object_r:xdm_home_t,s0)
 HOME_DIR/\.dmrc.*	--	gen_context(system_u:object_r:xdm_home_t,s0)
 
 /root/\.fonts\.conf	--	gen_context(system_u:object_r:user_fonts_config_t,s0)
@@ -31,6 +32,7 @@ HOME_DIR/\.dmrc.*	--	gen_context(system_u:object_r:xdm_home_t,s0)
 /root/\.Xauth.*	--	gen_context(system_u:object_r:xauth_home_t,s0)
 /root/\.Xauthority.*	--	gen_context(system_u:object_r:xauth_home_t,s0)
 /root/\.xsession-errors.*	--	gen_context(system_u:object_r:xdm_home_t,s0)
+/root/\.wayland-errors.*	--	gen_context(system_u:object_r:xdm_home_t,s0)
 /root/\.dmrc.*	--	gen_context(system_u:object_r:xdm_home_t,s0)
 
 #

diff --git a/policy/modules/services/xserver.if b/policy/modules/services/xserver.if
@@ -2168,6 +2168,7 @@ interface(`xserver_filetrans_home_content',`
 	userdom_user_home_dir_filetrans($1, xdm_home_t, file, ".xsession-errors-:9")
 	userdom_user_home_dir_filetrans($1, xdm_home_t, file, ".xsession-errors-stamped")
 	userdom_user_home_dir_filetrans($1, xdm_home_t, file, ".xsession-errors-stamped.old")
+	userdom_user_home_dir_filetrans($1, xdm_home_t, file, ".wayland-errors")
 	userdom_user_home_dir_filetrans($1, user_fonts_config_t, file, ".fonts.conf")
 	userdom_user_home_dir_filetrans($1, user_fonts_config_t, dir, ".fonts.d")
 	userdom_user_home_dir_filetrans($1, user_fonts_t, dir, ".fonts")
@@ -2212,6 +2213,7 @@ interface(`xserver_filetrans_admin_home_content',`
 	userdom_admin_home_dir_filetrans($1, xdm_home_t, file, ".xsession-errors-stamped")
 	userdom_admin_home_dir_filetrans($1, xdm_home_t, file, ".xsession-errors-stamped.old")
 	userdom_admin_home_dir_filetrans($1, xdm_home_t, file, ".xsession-errors.old")
+	userdom_admin_home_dir_filetrans($1, xdm_home_t, file, ".wayland-errors")
 	userdom_admin_home_dir_filetrans($1, iceauth_home_t, file, ".DCOP")
 	userdom_admin_home_dir_filetrans($1, iceauth_home_t, file, ".ICEauthority")
 	userdom_admin_home_dir_filetrans($1, xauth_home_t, file, ".Xauthority")