[selinux-policy: 2853/3172] Fix mmap_zero assertion violation in xserver.

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 23:14:01 UTC 2010


commit a1b42052c9d43b9deaac64862f4c6db7bc7f54ed
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Wed Sep 1 09:59:39 2010 -0400

    Fix mmap_zero assertion violation in xserver.

 policy/modules/services/xserver.te |    1 -
 1 files changed, 0 insertions(+), 1 deletions(-)
---
diff --git a/policy/modules/services/xserver.te b/policy/modules/services/xserver.te
index 7899188..58bae41 100644
--- a/policy/modules/services/xserver.te
+++ b/policy/modules/services/xserver.te
@@ -599,7 +599,6 @@ allow xserver_t input_xevent_t:x_event send;
 allow xserver_t self:capability { dac_override fowner fsetid setgid setuid ipc_owner sys_rawio sys_admin sys_nice sys_tty_config mknod net_bind_service };
 dontaudit xserver_t self:capability chown;
 allow xserver_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap };
-allow xserver_t self:memprotect mmap_zero;
 allow xserver_t self:fd use;
 allow xserver_t self:fifo_file rw_fifo_file_perms;
 allow xserver_t self:sock_file read_sock_file_perms;


More information about the scm-commits mailing list