andreacavalli
/
xserver-multidpi
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

xselinux: Stop special-casing QueryPointer access checks. 

XACE has been changed to not return BadAccess on device read failures.
Thus, no need for this workaround code.

[Backport to 1.7]

Signed-off-by: Eamon Walsh <ewalsh@tycho.nsa.gov>
(cherry-picked from commit 0ff2831990)
This commit is contained in:
Eamon Walsh 2009-09-15 19:41:04 -04:00
parent 7d3f8ce505
commit c1a861eedf
1 changed files with 0 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
Xext/xselinux.c
View File

@ -686,17 +686,6 @@ SELinuxDevice(CallbackListPtr *pcbl, pointer unused, pointer calldata)
}
}
/* XXX only check read permission on XQueryKeymap */
/* This is to allow the numerous apps that call XQueryPointer to work */
if (rec->access_mode & DixReadAccess) {
ClientPtr client = rec->client;
REQUEST(xReq);
if (stuff && stuff->reqType != X_QueryKeymap) {
rec->access_mode &= ~DixReadAccess;
rec->access_mode |= DixGetAttrAccess;
}
}
rc = SELinuxDoCheck(subj, obj, SECCLASS_X_DEVICE, rec->access_mode,
&auditdata);
if (rc != Success)