f267f85 X Object Manager policy revisions to xserver.te.

1 file Authored by Eamon Walsh 14 years ago, Committed by Chris PeBenito 14 years ago,
    X Object Manager policy revisions to xserver.te.
    
    X Object Manager policy revisions to xserver.te.
    
    This commit consists of three main parts:
    
    1. Code movement.  There were X object manager-related statements
       scattered somewhat throughout the file; these have been consolidated,
       which resulted in some other statements moving (e.g. iceauth_t).
    
    2. Type changes.  Many of the specific event, extension, and property
       types have been dropped for the time being.  The rootwindow_t and
       remote_xclient_t types have been renamed, and a root_xcolormap_t
       type has been (re-)added.  This is for naming consistency.
       An "xserver_unprotected" alias has been added for use in labeling
       clients whose resources should be globally accessible (e.g. xdm_t).
    
    3. Policy changes.  These are mostly related to devices, which now have
       separate x_keyboard and x_pointer classes.  The "Hacks" section
       has been cleaned up, and various other classes have had the default
       permissions tweaked.
    
    Signed-off-by: Eamon Walsh <ewalsh@tycho.nsa.gov>
    Signed-off-by: Chris PeBenito <cpebenito@tresys.com>
    
        
file modified
+152 -121