diff --git a/policy/modules/services/xserver.te b/policy/modules/services/xserver.te index d507654..06e5ba9 100644 --- a/policy/modules/services/xserver.te +++ b/policy/modules/services/xserver.te @@ -1,5 +1,5 @@ -policy_module(xserver, 3.0.0) +policy_module(xserver, 3.0.1) gen_require(` class x_drawable all_x_drawable_perms; @@ -124,7 +124,7 @@ userdom_user_home_content(user_fonts_cache_t) type user_fonts_config_t; typealias user_fonts_config_t alias { staff_fonts_config_t sysadm_fonts_config_t }; typealias user_fonts_config_t alias { auditadm_fonts_config_t secadm_fonts_config_t }; -userdom_user_home_content(user_fonts_cache_t) +userdom_user_home_content(user_fonts_config_t) type xevent_t alias default_xevent_t, xevent_type; type xext_t alias unknown_xext_t, xextension_type; diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if index 4cb0867..218bcfc 100644 --- a/policy/modules/system/userdomain.if +++ b/policy/modules/system/userdomain.if @@ -57,6 +57,7 @@ template(`userdom_base_user_template',` dontaudit $1_t self:socket create; allow $1_t user_devpts_t:chr_file { setattr rw_chr_file_perms }; + term_create_pty($1_t, user_devpts_t) # avoid annoying messages on terminal hangup on role change dontaudit $1_t user_devpts_t:chr_file ioctl; diff --git a/policy/modules/system/userdomain.te b/policy/modules/system/userdomain.te index 201c359..63006c0 100644 --- a/policy/modules/system/userdomain.te +++ b/policy/modules/system/userdomain.te @@ -1,5 +1,5 @@ -policy_module(userdomain, 4.0.0) +policy_module(userdomain, 4.0.1) ######################################## #