rhgb and /usr

[Ivan Gyurdiev]

On Sun, 2005-05-22 at 10:21 -0700, Tom London wrote:
> More on this.....
> 
> rhgb now produces a black screen with the X cursor and 'hangs' until
> the usual graphical login starts.

This is my fault (sort of). Testing whether rhgb needs usr_t or
not was on my TODO list when Dan Walsh merged parts of my patch.

I guess it is needed, for things other than fonts.

> adding read and getattr for usr_t makes this work again:
> --- /tmp/rhgb.te        2005-05-22 10:20:35.000000000 -0700
> +++ ./rhgb.te   2005-05-22 10:09:49.000000000 -0700
> @@ -95,4 +95,4 @@
>  allow initrc_t ramfs_t:sock_file write;
>  allow initrc_t rhgb_t:unix_stream_socket { read write };
> 
> -allow rhgb_t default_t:file { getattr read };
> +allow rhgb_t { default_t usr_t }:file { getattr read };

-- 
Ivan Gyurdiev <ivg2 at cornell.edu>
Cornell University