xselinux: Stop special-casing QueryPointer access checks.
XACE has been changed to not return BadAccess on device read failures. Thus, no need for this workaround code. Signed-off-by: Eamon Walsh <ewalsh@tycho.nsa.gov>
This commit is contained in:
parent
8502c06e19
commit
0ff2831990
|
@ -372,17 +372,6 @@ SELinuxDevice(CallbackListPtr *pcbl, pointer unused, pointer calldata)
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
/* XXX only check read permission on XQueryKeymap */
|
|
||||||
/* This is to allow the numerous apps that call XQueryPointer to work */
|
|
||||||
if (rec->access_mode & DixReadAccess) {
|
|
||||||
ClientPtr client = rec->client;
|
|
||||||
REQUEST(xReq);
|
|
||||||
if (stuff && stuff->reqType != X_QueryKeymap) {
|
|
||||||
rec->access_mode &= ~DixReadAccess;
|
|
||||||
rec->access_mode |= DixGetAttrAccess;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
rc = SELinuxDoCheck(subj, obj, SECCLASS_X_DEVICE, rec->access_mode,
|
rc = SELinuxDoCheck(subj, obj, SECCLASS_X_DEVICE, rec->access_mode,
|
||||||
&auditdata);
|
&auditdata);
|
||||||
if (rc != Success)
|
if (rc != Success)
|
||||||
|
|
Loading…
Reference in New Issue
Block a user