nVIDIA binary driver audits generated by OpenGL apps

Daniel J Walsh dwalsh at redhat.com
Fri May 7 14:55:38 UTC 2004


Andrew Farris wrote:

>On Thu, 2004-04-29 at 09:20 -0400, Daniel J Walsh wrote:
>  
>
>>diff -u base_user_macros.te~ base_user_macros.te
>>--- base_user_macros.te~    2004-04-29 09:18:03.882721648 -0400
>>+++ base_user_macros.te    2004-04-29 09:18:58.802372592 -0400
>>@@ -250,6 +250,9 @@
>> 
>> ')dnl end ifdef xdm.te
>> 
>>+# Access the special XServer devices.
>>+allow $1_t xserver_misc_device_t:chr_file rw_file_perms;
>>+
>> # Access the sound device.
>> allow $1_t sound_device_t:chr_file { getattr read write ioctl };
>>    
>>
>
>Ok, I must have had my policy slightly confused when I reported back
>that policy-1.11.2-21 had this fix... it doesn't appear to be there
>afterall.  The other xserver_misc_devict_t changes are there, but not
>this one.
>
>Did this slip through the crack or are nVIDIA driver users targeted for
>the relaxed policy perhaps?
>
>  
>
Seems to have fallen through the cracks.  I have readded it.

Available in policy-1.11.3-3



More information about the fedora-selinux-list mailing list