policy for vino server (based on current rawhide policy)

[Dominick Grift]

I create policy for vino server today. I tested it a few times and it
works. You can either use it by enabling remote desktop or via empathy.

It requires many patches etc though. I attached what i think is related.
I might have missed some.

Its also on my git repository ( i maintain it there )

git clone git://82.197.205.60/selinux-modules.git

You will have to some vnc tube ports (vnc_port_t) there is a comment
about it in vino.te.



-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: vino.fc
Url: http://lists.fedoraproject.org/pipermail/selinux/attachments/20100102/3eb922c0/attachment.pl 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: telepathy.fc
Url: http://lists.fedoraproject.org/pipermail/selinux/attachments/20100102/3eb922c0/attachment-0001.pl 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: telepathy.if
Url: http://lists.fedoraproject.org/pipermail/selinux/attachments/20100102/3eb922c0/attachment-0002.pl 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: telepathy.te
Url: http://lists.fedoraproject.org/pipermail/selinux/attachments/20100102/3eb922c0/attachment-0003.pl 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: vino.if
Url: http://lists.fedoraproject.org/pipermail/selinux/attachments/20100102/3eb922c0/attachment-0004.pl 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: vino.te
Url: http://lists.fedoraproject.org/pipermail/selinux/attachments/20100102/3eb922c0/attachment-0005.pl 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: patch_bind_initrc_domtrans_for_cobbler.fc
Url: http://lists.fedoraproject.org/pipermail/selinux/attachments/20100102/3eb922c0/attachment-0006.pl 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: patch_dbus_transition_to_session_bus_for_telepathy.if
Url: http://lists.fedoraproject.org/pipermail/selinux/attachments/20100102/3eb922c0/attachment-0007.pl 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: patch_files_read_all_tmpfs_files_for_pulseaudio.if
Url: http://lists.fedoraproject.org/pipermail/selinux/attachments/20100102/3eb922c0/attachment-0008.pl 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: patch_gnome_cache_home_filetrans_for_telepathy_mc.if
Url: http://lists.fedoraproject.org/pipermail/selinux/attachments/20100102/3eb922c0/attachment-0009.pl 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: patch_gnome_setattr_home_for_mplayer.if
Url: http://lists.fedoraproject.org/pipermail/selinux/attachments/20100102/3eb922c0/attachment-0010.pl 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: patch_pulseaudio_sign_key_with_seahorse.if
Url: http://lists.fedoraproject.org/pipermail/selinux/attachments/20100102/3eb922c0/attachment-0011.pl 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: patch_userdomain_setattr_user_tmp_dirs_for_seahorse_daemon.if
Url: http://lists.fedoraproject.org/pipermail/selinux/attachments/20100102/3eb922c0/attachment-0012.pl 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 261 bytes
Desc: OpenPGP digital signature
Url : http://lists.fedoraproject.org/pipermail/selinux/attachments/20100102/3eb922c0/attachment.bin