type=AVC msg=audit(1213041678.053:8): avc: denied { read } for
pid=2649 comm="Xorg" name="mem" dev=tmpfs ino=3893
scontext=system_u:system_r:xdm_xserver_t:s0-s15:c0.c1023
tcontext=system_u:object_r:memory_device_t:s15:c0.c1023
tclass=chr_file
type=AVC msg=audit(1213041678.432:10): avc: denied { write } for
pid=2649 comm="Xorg" name="mem" dev=tmpfs ino=3893
scontext=system_u:system_r:xdm_xserver_t:s0-s15:c0.c1023
tcontext=system_u:object_r:memory_device_t:s15:c0.c1023
tclass=chr_file
The xserver_common_domain_template seems to have the necessary allow
rules (dev_read_raw_memory and dev_wx_raw_memory) for the types so I
create a local module and added:
mls_trusted_object(xdm_xserver_t)
to deal with the MLS constraint violation but I'm still getting these
AVC.What else can it be?
Ted
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
