[selinux-policy/f17] Allow xguest to execute home content by default, so that gnome-shell will work better

Daniel J Walsh dwalsh at fedoraproject.org
Tue May 29 16:08:19 UTC 2012


commit 5d007218affdc70821e39cf8dc6d300bfb9173da
Author: Dan Walsh <dwalsh at redhat.com>
Date:   Tue May 29 12:08:13 2012 -0400

    Allow xguest to execute home content by default, so that gnome-shell will work better

 booleans-targeted.conf |    4 +++-
 1 files changed, 3 insertions(+), 1 deletions(-)
---
diff --git a/booleans-targeted.conf b/booleans-targeted.conf
index 30519c2..5b76aa1 100644
--- a/booleans-targeted.conf
+++ b/booleans-targeted.conf
@@ -236,7 +236,9 @@ allow_xserver_execmem = false
 # disallow guest accounts to execute files that they can create 
 # 
 allow_guest_exec_content = false
-allow_xguest_exec_content = false
+
+# xguest now requires to execute content in homedir to allow gnome-shell to work# properly.
+allow_xguest_exec_content = true
 
 # Only allow browser to use the web
 # 


More information about the scm-commits mailing list