diff options
author | Eamon Walsh <ewalsh@tycho.nsa.gov> | 2009-06-26 16:50:12 -0400 |
---|---|---|
committer | Eamon Walsh <ewalsh@tycho.nsa.gov> | 2009-06-26 17:05:52 -0400 |
commit | 51105de9b0d865c4b5e5a7d9ab23c89d808d1cfa (patch) | |
tree | 833821b0d0f6b3ae62a1e897d2f7845f56c26177 /Xext | |
parent | 10812204b3415c969bcebd3215e84d758a0b4dd8 (diff) |
xselinux: ignore property hook calls with the new Post access mode bit set.
Signed-off-by: Eamon Walsh <ewalsh@tycho.nsa.gov>
Diffstat (limited to 'Xext')
-rw-r--r-- | Xext/xselinux.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/Xext/xselinux.c b/Xext/xselinux.c index 9898b2986..805423074 100644 --- a/Xext/xselinux.c +++ b/Xext/xselinux.c @@ -913,6 +913,10 @@ SELinuxProperty(CallbackListPtr *pcbl, pointer unused, pointer calldata) security_id_t tsid; int rc; + /* Don't care about the new content check */ + if (rec->access_mode & DixPostAccess) + return; + subj = dixLookupPrivate(&rec->client->devPrivates, subjectKey); obj = dixLookupPrivate(&pProp->devPrivates, objectKey); |