diff options
| author | Eamon Walsh <ewalsh@tycho.nsa.gov> | 2008-02-27 22:29:15 -0500 |
|---|---|---|
| committer | Eamon Walsh <ewalsh@moss-charon.epoch.ncsc.mil> | 2008-02-27 22:48:28 -0500 |
| commit | e40cc5305bec656108077ab13fcc8e6e82b3707a (patch) | |
| tree | 520a79917bf6bd5e394c6203db239b33a95efe78 /Xext | |
| parent | 3b1df47bd400be9dca34b5e5d1ac2b117f8cc4ed (diff) | |
xselinux: Don't throw BadAccess if DixUnknownAccess is passed in to a hook.
The avc will still appear, however, so that the callsite can be fixed.
Diffstat (limited to 'Xext')
| -rw-r--r-- | Xext/xselinux.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/Xext/xselinux.c b/Xext/xselinux.c index d3fe86b3a..6862bb304 100644 --- a/Xext/xselinux.c +++ b/Xext/xselinux.c @@ -312,6 +312,8 @@ SELinuxDoCheck(SELinuxSubjectRec *subj, SELinuxObjectRec *obj, if (avc_has_perm(subj->sid, obj->sid, class, mode, &subj->aeref, auditdata) < 0) { + if (mode == DixUnknownAccess) + return Success; /* DixUnknownAccess requests OK ... for now */ if (errno == EACCES) return BadAccess; ErrorF("ServerPerm: unexpected error %d\n", errno); |