I'm seeing x_drawable read denials in Xorg.0.log on a system with the X server in enforcing. I'm confused about these because the xserver_object_manager boolean is set which gets: allow x_domain xdrawable_type:x_drawable *; and the source context type of the avc is a type in the x_domain attribute and the target context type is in the xdrawable_type attribute which should be allowed by the included allow rule. Ted -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
