Go to file
Eamon Walsh 31166c2ae0 xace: add a new hook for checking property content after it has been set.
Allows security modules to enforce what property contents can be set by
clients.  Uses the new DixPostAccess bit to distinguish between the
existing call made during the lookup (with the old property data) and
this new call.  Note that this only applies to writes, prepends, or
appends to existing properties; for new properties the existing
DixCreateAccess hook call may be used since it includes the new data.

Refer to the XACE-Spec document in xorg-docs, section "Property Access."

Signed-off-by: Eamon Walsh <ewalsh@tycho.nsa.gov>
2009-06-26 17:52:51 -04:00
composite Correct some Sun license notices to Sun's standard X11 license format 2009-05-15 11:24:15 -07:00
config config: fix build after XI2 API changes to RemoveDevice. 2009-06-07 20:35:14 +10:00
damageext Fix most remaining deprecated resource lookups. 2009-04-29 01:04:37 -04:00
dbe Fix most remaining deprecated resource lookups. 2009-04-29 01:04:37 -04:00
dix xace: add a new hook for checking property content after it has been set. 2009-06-26 17:52:51 -04:00
doc doc: Remove mention of Kerberos replay cache from Xserver.1 2009-06-01 15:50:50 -04:00
exa exa: driver pixmaps enabled if either CreatePixmap or CreatePixmap2 present 2009-06-09 09:24:32 +10:00
fb Fix clipping when windows are used as sources 2009-06-18 12:36:11 -04:00
glx GLX: make function static. 2009-06-24 10:41:47 +10:00
hw xfree86: DIST_SUBDIRS should not contain variables 2009-06-24 10:15:33 +02:00
include dix: add a new DixAccess bit, "DixPostAccess". 2009-06-26 17:05:52 -04:00
m4 Add shave so that we can see the steaming piles of warnings generated. 2009-04-14 10:35:44 -04:00
mi mi: ignore DGA events in ChangeDeviceID 2009-06-18 08:23:30 +10:00
miext Rootless: Use serverClient instead of NullClient 2009-06-06 22:23:56 -07:00
os Clarify use of and need for mffs vs. ffs 2009-06-18 09:49:19 -07:00
randr randr: fix typo in swapped dispatch 2009-06-15 10:10:26 -04:00
record record: use dixLookupResourceByClass instead of LookupIDByClass. 2009-06-18 15:21:28 +10:00
render Fix miComputeCompositeRegion() to follow new clip rules. 2009-06-18 12:36:11 -04:00
test Revert "test: check from INT_MIN to INT_MAX for core type conversion" 2009-06-05 16:45:28 +10:00
Xext xselinux: ignore property hook calls with the new Post access mode bit set. 2009-06-26 17:05:52 -04:00
xfixes Correct some Sun license notices to Sun's standard X11 license format 2009-05-15 11:24:15 -07:00
Xi Xi: check for GetAttr permission when listing or querying devices. 2009-06-23 21:15:27 -04:00
xkb Xi: Add support for sourceid in the device classes. 2009-06-17 11:21:19 +10:00
.gitignore Add shave so that we can see the steaming piles of warnings generated. 2009-04-14 10:35:44 -04:00
autogen.sh autogen.sh: Pass --force to autoreconf 2008-07-22 16:55:26 +03:00
configure.ac configure: Provide the --enable/disable-xaa option. 2009-06-24 00:26:06 +03:00
COPYING Correct some Sun license notices to Sun's standard X11 license format 2009-05-15 11:24:15 -07:00
cpprules.in For MANDEFS, also replace __mandir__ for $(mandir) which includes 2006-12-08 15:51:44 -06:00
Makefile.am Move contributed m4 to a subdir so we can more easily update contributions. 2009-04-14 10:35:44 -04:00
shave-libtool.in Add shave so that we can see the steaming piles of warnings generated. 2009-04-14 10:35:44 -04:00
shave.in Add shave so that we can see the steaming piles of warnings generated. 2009-04-14 10:35:44 -04:00
xorg-server.m4 Add xorg-server.m4 for driver dependency checking. 2005-11-01 15:01:51 +00:00
xorg-server.pc.in Enable compiling the X Server and modules with hidden symbols by default. 2008-11-28 02:01:57 -02:00