Re: [PATCH] selinux: Fix regression for Xorg

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 2011-03-28 at 08:42 -0400, Stephen Smalley wrote:
> On Fri, 2011-03-25 at 20:03 -0700, Justin P. Mattock wrote:
> > not sure whats going on now.. but loading up the latest on my iMac with 
> > the below patch makes no difference I still hit the bug macbook pro 
> > works fine(maybe something with the different video drivers or something)
> > 
> > full dmesg of my iMac here:
> > http://fpaste.org/SNFC/
> 
> Hi Justin,
> 
> I did before and after testing using the compute_create utility from
> libselinux/utils, and it showed that the kernel returned the wrong
> context prior to the patch and the right context afterward.  I'm
> guessing you aren't booting the right kernel or didn't apply the patch
> correctly.
> 
> You can run:
> compute_create `id -Z` `id -Z` x_drawable
> and see whether the returned context has object_r or not.

Also, I tested before and after the patch with Xorg, and confirmed that
the compute_sid errors vanished when using a kernel with the patch
applied.

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.


[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux