diff options
Diffstat (limited to 'config')
| -rw-r--r-- | config/appconfig-mcs/x_contexts | 194 | ||||
| -rw-r--r-- | config/appconfig-mls/x_contexts | 194 | ||||
| -rw-r--r-- | config/appconfig-standard/x_contexts | 194 |
3 files changed, 582 insertions, 0 deletions
diff --git a/config/appconfig-mcs/x_contexts b/config/appconfig-mcs/x_contexts new file mode 100644 index 00000000..08da649d --- /dev/null +++ b/config/appconfig-mcs/x_contexts @@ -0,0 +1,194 @@ +# +# Config file for XSELinux extension +# + + +# +## +### Rules for X Clients +## +# + +# +# The default client rule defines a context to be used for all clients +# connecting to the server from a remote host. +# +client * system_u:object_r:remote_xclient_t:s0 + + +# +## +### Rules for X Properties +## +# + +# +# Property rules map a property name to a context. A default property +# rule indicated by an asterisk should follow all other property rules. +# +# Properties that normal clients may only read +property XFree86_VT system_u:object_r:info_xproperty_t:s0 +property XFree86_DDC_EDID1_RAWDATA system_u:object_r:info_xproperty_t:s0 +property RESOURCE_MANAGER system_u:object_r:info_xproperty_t:s0 +property SCREEN_RESOURCES system_u:object_r:info_xproperty_t:s0 +property _MIT_PRIORITY_COLORS system_u:object_r:info_xproperty_t:s0 +property AT_SPI_IOR system_u:object_r:info_xproperty_t:s0 +property _SELINUX_CLIENT_CONTEXT system_u:object_r:info_xproperty_t:s0 +property _NET_WORKAREA system_u:object_r:info_xproperty_t:s0 +property _XKB_RULES_NAMES system_u:object_r:info_xproperty_t:s0 + +# Clipboard and selection properties +property CUT_BUFFER0 system_u:object_r:clipboard_xproperty_t:s0 +property CUT_BUFFER1 system_u:object_r:clipboard_xproperty_t:s0 +property CUT_BUFFER2 system_u:object_r:clipboard_xproperty_t:s0 +property CUT_BUFFER3 system_u:object_r:clipboard_xproperty_t:s0 +property CUT_BUFFER4 system_u:object_r:clipboard_xproperty_t:s0 +property CUT_BUFFER5 system_u:object_r:clipboard_xproperty_t:s0 +property CUT_BUFFER6 system_u:object_r:clipboard_xproperty_t:s0 +property CUT_BUFFER7 system_u:object_r:clipboard_xproperty_t:s0 + +# Default fallback type +property * system_u:object_r:xproperty_t:s0 + + +# +## +### Rules for X Extensions +## +# + +# +# Extension rules map an extension name to a context. A default extension +# rule indicated by an asterisk should follow all other extension rules. +# +# Standard extensions +extension BIG-REQUESTS system_u:object_r:std_xext_t:s0 +extension SHAPE system_u:object_r:std_xext_t:s0 +extension SYNC system_u:object_r:std_xext_t:s0 +extension XC-MISC system_u:object_r:std_xext_t:s0 +extension XFIXES system_u:object_r:std_xext_t:s0 +extension XInputExtension system_u:object_r:std_xext_t:s0 +extension XKEYBOARD system_u:object_r:std_xext_t:s0 +extension DAMAGE system_u:object_r:std_xext_t:s0 +extension RENDER system_u:object_r:std_xext_t:s0 +extension XINERAMA system_u:object_r:std_xext_t:s0 + +# Direct hardware access extensions +extension XFree86-DGA system_u:object_r:directhw_xext_t:s0 +extension XFree86-VidModeExtension system_u:object_r:directhw_xext_t:s0 + +# Screen management and multihead extensions +extension RANDR system_u:object_r:output_xext_t:s0 +extension Composite system_u:object_r:output_xext_t:s0 + +# Screensaver, power management extensions +extension DPMS system_u:object_r:screensaver_xext_t:s0 +extension MIT-SCREEN-SAVER system_u:object_r:screensaver_xext_t:s0 + +# Shared memory extensions +extension MIT-SHM system_u:object_r:shmem_xext_t:s0 +extension XFree86-Bigfont system_u:object_r:shmem_xext_t:s0 + +# Accelerated graphics, OpenGL, direct rendering extensions +extension GLX system_u:object_r:accelgraphics_xext_t:s0 +extension NV-CONTROL system_u:object_r:accelgraphics_xext_t:s0 +extension NV-GLX system_u:object_r:accelgraphics_xext_t:s0 +extension NVIDIA-GLX system_u:object_r:accelgraphics_xext_t:s0 + +# Debugging, testing, and recording extensions +extension RECORD system_u:object_r:debug_xext_t:s0 +extension X-Resource system_u:object_r:debug_xext_t:s0 +extension XTEST system_u:object_r:debug_xext_t:s0 + +# Security-related extensions +extension SECURITY system_u:object_r:security_xext_t:s0 +extension SELinux system_u:object_r:security_xext_t:s0 +extension XAccessControlExtension system_u:object_r:security_xext_t:s0 +extension XC-APPGROUP system_u:object_r:security_xext_t:s0 + +# Video extensions +extension XVideo system_u:object_r:video_xext_t:s0 +extension XVideo-MotionCompensation system_u:object_r:video_xext_t:s0 + +# Default fallback type +extension * system_u:object_r:xext_t:s0 + + +# +## +### Rules for X Selections +## +# + +# Selection rules map a selection name to a context. A default selection +# rule indicated by an asterisk should follow all other selection rules. +# +# Standard selections +selection XA_PRIMARY system_u:object_r:clipboard_xselection_t:s0 +selection XA_SECONDARY system_u:object_r:clipboard_xselection_t:s0 +selection PRIMARY system_u:object_r:clipboard_xselection_t:s0 +selection CLIPBOARD system_u:object_r:clipboard_xselection_t:s0 + +# Default fallback type +selection * system_u:object_r:xselection_t:s0 + + +# +## +### Rules for X Events +## +# + +# +# Event rules map an event protocol name to a context. A default event +# rule indicated by an asterisk should follow all other event rules. +# +# Input events +event X11:KeyPress system_u:object_r:input_xevent_t:s0 +event X11:KeyRelease system_u:object_r:input_xevent_t:s0 +event X11:ButtonPress system_u:object_r:input_xevent_t:s0 +event X11:ButtonRelease system_u:object_r:input_xevent_t:s0 +event X11:MotionNotify system_u:object_r:input_xevent_t:s0 +event X11:SelectionNotify system_u:object_r:input_xevent_t:s0 +event XInputExtension:DeviceKeyPress system_u:object_r:input_xevent_t:s0 +event XInputExtension:DeviceKeyRelease system_u:object_r:input_xevent_t:s0 +event XInputExtension:DeviceButtonPress system_u:object_r:input_xevent_t:s0 +event XInputExtension:DeviceButtonRelease system_u:object_r:input_xevent_t:s0 +event XInputExtension:DeviceMotionNotify system_u:object_r:input_xevent_t:s0 +event XInputExtension:DeviceValuator system_u:object_r:input_xevent_t:s0 +event XInputExtension:ProximityIn system_u:object_r:input_xevent_t:s0 +event XInputExtension:ProximityOut system_u:object_r:input_xevent_t:s0 + +# Focus events +event X11:FocusIn system_u:object_r:focus_xevent_t:s0 +event X11:FocusOut system_u:object_r:focus_xevent_t:s0 +event X11:EnterNotify system_u:object_r:focus_xevent_t:s0 +event X11:LeaveNotify system_u:object_r:focus_xevent_t:s0 + +# Property events +event X11:PropertyNotify system_u:object_r:property_xevent_t:s0 + +# Client message events +event X11:ClientMessage system_u:object_r:client_xevent_t:s0 + +# Manager events +event X11:ConfigureRequest system_u:object_r:manage_xevent_t:s0 +event X11:ResizeRequest system_u:object_r:manage_xevent_t:s0 +event X11:MapRequest system_u:object_r:manage_xevent_t:s0 +event X11:CirculateRequest system_u:object_r:manage_xevent_t:s0 +event X11:CreateNotify system_u:object_r:manage_xevent_t:s0 +event X11:DestroyNotify system_u:object_r:manage_xevent_t:s0 +event X11:MapNotify system_u:object_r:manage_xevent_t:s0 +event X11:UnmapNotify system_u:object_r:manage_xevent_t:s0 +event X11:ReparentNotify system_u:object_r:manage_xevent_t:s0 +event X11:ConfigureNotify system_u:object_r:manage_xevent_t:s0 +event X11:GravityNotify system_u:object_r:manage_xevent_t:s0 +event X11:CirculateNotify system_u:object_r:manage_xevent_t:s0 +event X11:Expose system_u:object_r:manage_xevent_t:s0 +event X11:VisibilityNotify system_u:object_r:manage_xevent_t:s0 + +# Unknown events (that are not registered in the X server's name database) +event <unknown> system_u:object_r:unknown_xevent_t:s0 + +# Default fallback type +event * system_u:object_r:xevent_t:s0 diff --git a/config/appconfig-mls/x_contexts b/config/appconfig-mls/x_contexts new file mode 100644 index 00000000..08da649d --- /dev/null +++ b/config/appconfig-mls/x_contexts @@ -0,0 +1,194 @@ +# +# Config file for XSELinux extension +# + + +# +## +### Rules for X Clients +## +# + +# +# The default client rule defines a context to be used for all clients +# connecting to the server from a remote host. +# +client * system_u:object_r:remote_xclient_t:s0 + + +# +## +### Rules for X Properties +## +# + +# +# Property rules map a property name to a context. A default property +# rule indicated by an asterisk should follow all other property rules. +# +# Properties that normal clients may only read +property XFree86_VT system_u:object_r:info_xproperty_t:s0 +property XFree86_DDC_EDID1_RAWDATA system_u:object_r:info_xproperty_t:s0 +property RESOURCE_MANAGER system_u:object_r:info_xproperty_t:s0 +property SCREEN_RESOURCES system_u:object_r:info_xproperty_t:s0 +property _MIT_PRIORITY_COLORS system_u:object_r:info_xproperty_t:s0 +property AT_SPI_IOR system_u:object_r:info_xproperty_t:s0 +property _SELINUX_CLIENT_CONTEXT system_u:object_r:info_xproperty_t:s0 +property _NET_WORKAREA system_u:object_r:info_xproperty_t:s0 +property _XKB_RULES_NAMES system_u:object_r:info_xproperty_t:s0 + +# Clipboard and selection properties +property CUT_BUFFER0 system_u:object_r:clipboard_xproperty_t:s0 +property CUT_BUFFER1 system_u:object_r:clipboard_xproperty_t:s0 +property CUT_BUFFER2 system_u:object_r:clipboard_xproperty_t:s0 +property CUT_BUFFER3 system_u:object_r:clipboard_xproperty_t:s0 +property CUT_BUFFER4 system_u:object_r:clipboard_xproperty_t:s0 +property CUT_BUFFER5 system_u:object_r:clipboard_xproperty_t:s0 +property CUT_BUFFER6 system_u:object_r:clipboard_xproperty_t:s0 +property CUT_BUFFER7 system_u:object_r:clipboard_xproperty_t:s0 + +# Default fallback type +property * system_u:object_r:xproperty_t:s0 + + +# +## +### Rules for X Extensions +## +# + +# +# Extension rules map an extension name to a context. A default extension +# rule indicated by an asterisk should follow all other extension rules. +# +# Standard extensions +extension BIG-REQUESTS system_u:object_r:std_xext_t:s0 +extension SHAPE system_u:object_r:std_xext_t:s0 +extension SYNC system_u:object_r:std_xext_t:s0 +extension XC-MISC system_u:object_r:std_xext_t:s0 +extension XFIXES system_u:object_r:std_xext_t:s0 +extension XInputExtension system_u:object_r:std_xext_t:s0 +extension XKEYBOARD system_u:object_r:std_xext_t:s0 +extension DAMAGE system_u:object_r:std_xext_t:s0 +extension RENDER system_u:object_r:std_xext_t:s0 +extension XINERAMA system_u:object_r:std_xext_t:s0 + +# Direct hardware access extensions +extension XFree86-DGA system_u:object_r:directhw_xext_t:s0 +extension XFree86-VidModeExtension system_u:object_r:directhw_xext_t:s0 + +# Screen management and multihead extensions +extension RANDR system_u:object_r:output_xext_t:s0 +extension Composite system_u:object_r:output_xext_t:s0 + +# Screensaver, power management extensions +extension DPMS system_u:object_r:screensaver_xext_t:s0 +extension MIT-SCREEN-SAVER system_u:object_r:screensaver_xext_t:s0 + +# Shared memory extensions +extension MIT-SHM system_u:object_r:shmem_xext_t:s0 +extension XFree86-Bigfont system_u:object_r:shmem_xext_t:s0 + +# Accelerated graphics, OpenGL, direct rendering extensions +extension GLX system_u:object_r:accelgraphics_xext_t:s0 +extension NV-CONTROL system_u:object_r:accelgraphics_xext_t:s0 +extension NV-GLX system_u:object_r:accelgraphics_xext_t:s0 +extension NVIDIA-GLX system_u:object_r:accelgraphics_xext_t:s0 + +# Debugging, testing, and recording extensions +extension RECORD system_u:object_r:debug_xext_t:s0 +extension X-Resource system_u:object_r:debug_xext_t:s0 +extension XTEST system_u:object_r:debug_xext_t:s0 + +# Security-related extensions +extension SECURITY system_u:object_r:security_xext_t:s0 +extension SELinux system_u:object_r:security_xext_t:s0 +extension XAccessControlExtension system_u:object_r:security_xext_t:s0 +extension XC-APPGROUP system_u:object_r:security_xext_t:s0 + +# Video extensions +extension XVideo system_u:object_r:video_xext_t:s0 +extension XVideo-MotionCompensation system_u:object_r:video_xext_t:s0 + +# Default fallback type +extension * system_u:object_r:xext_t:s0 + + +# +## +### Rules for X Selections +## +# + +# Selection rules map a selection name to a context. A default selection +# rule indicated by an asterisk should follow all other selection rules. +# +# Standard selections +selection XA_PRIMARY system_u:object_r:clipboard_xselection_t:s0 +selection XA_SECONDARY system_u:object_r:clipboard_xselection_t:s0 +selection PRIMARY system_u:object_r:clipboard_xselection_t:s0 +selection CLIPBOARD system_u:object_r:clipboard_xselection_t:s0 + +# Default fallback type +selection * system_u:object_r:xselection_t:s0 + + +# +## +### Rules for X Events +## +# + +# +# Event rules map an event protocol name to a context. A default event +# rule indicated by an asterisk should follow all other event rules. +# +# Input events +event X11:KeyPress system_u:object_r:input_xevent_t:s0 +event X11:KeyRelease system_u:object_r:input_xevent_t:s0 +event X11:ButtonPress system_u:object_r:input_xevent_t:s0 +event X11:ButtonRelease system_u:object_r:input_xevent_t:s0 +event X11:MotionNotify system_u:object_r:input_xevent_t:s0 +event X11:SelectionNotify system_u:object_r:input_xevent_t:s0 +event XInputExtension:DeviceKeyPress system_u:object_r:input_xevent_t:s0 +event XInputExtension:DeviceKeyRelease system_u:object_r:input_xevent_t:s0 +event XInputExtension:DeviceButtonPress system_u:object_r:input_xevent_t:s0 +event XInputExtension:DeviceButtonRelease system_u:object_r:input_xevent_t:s0 +event XInputExtension:DeviceMotionNotify system_u:object_r:input_xevent_t:s0 +event XInputExtension:DeviceValuator system_u:object_r:input_xevent_t:s0 +event XInputExtension:ProximityIn system_u:object_r:input_xevent_t:s0 +event XInputExtension:ProximityOut system_u:object_r:input_xevent_t:s0 + +# Focus events +event X11:FocusIn system_u:object_r:focus_xevent_t:s0 +event X11:FocusOut system_u:object_r:focus_xevent_t:s0 +event X11:EnterNotify system_u:object_r:focus_xevent_t:s0 +event X11:LeaveNotify system_u:object_r:focus_xevent_t:s0 + +# Property events +event X11:PropertyNotify system_u:object_r:property_xevent_t:s0 + +# Client message events +event X11:ClientMessage system_u:object_r:client_xevent_t:s0 + +# Manager events +event X11:ConfigureRequest system_u:object_r:manage_xevent_t:s0 +event X11:ResizeRequest system_u:object_r:manage_xevent_t:s0 +event X11:MapRequest system_u:object_r:manage_xevent_t:s0 +event X11:CirculateRequest system_u:object_r:manage_xevent_t:s0 +event X11:CreateNotify system_u:object_r:manage_xevent_t:s0 +event X11:DestroyNotify system_u:object_r:manage_xevent_t:s0 +event X11:MapNotify system_u:object_r:manage_xevent_t:s0 +event X11:UnmapNotify system_u:object_r:manage_xevent_t:s0 +event X11:ReparentNotify system_u:object_r:manage_xevent_t:s0 +event X11:ConfigureNotify system_u:object_r:manage_xevent_t:s0 +event X11:GravityNotify system_u:object_r:manage_xevent_t:s0 +event X11:CirculateNotify system_u:object_r:manage_xevent_t:s0 +event X11:Expose system_u:object_r:manage_xevent_t:s0 +event X11:VisibilityNotify system_u:object_r:manage_xevent_t:s0 + +# Unknown events (that are not registered in the X server's name database) +event <unknown> system_u:object_r:unknown_xevent_t:s0 + +# Default fallback type +event * system_u:object_r:xevent_t:s0 diff --git a/config/appconfig-standard/x_contexts b/config/appconfig-standard/x_contexts new file mode 100644 index 00000000..f9cefb97 --- /dev/null +++ b/config/appconfig-standard/x_contexts @@ -0,0 +1,194 @@ +# +# Config file for XSELinux extension +# + + +# +## +### Rules for X Clients +## +# + +# +# The default client rule defines a context to be used for all clients +# connecting to the server from a remote host. +# +client * system_u:object_r:remote_xclient_t + + +# +## +### Rules for X Properties +## +# + +# +# Property rules map a property name to a context. A default property +# rule indicated by an asterisk should follow all other property rules. +# +# Properties that normal clients may only read +property XFree86_VT system_u:object_r:info_xproperty_t +property XFree86_DDC_EDID1_RAWDATA system_u:object_r:info_xproperty_t +property RESOURCE_MANAGER system_u:object_r:info_xproperty_t +property SCREEN_RESOURCES system_u:object_r:info_xproperty_t +property _MIT_PRIORITY_COLORS system_u:object_r:info_xproperty_t +property AT_SPI_IOR system_u:object_r:info_xproperty_t +property _SELINUX_CLIENT_CONTEXT system_u:object_r:info_xproperty_t +property _NET_WORKAREA system_u:object_r:info_xproperty_t +property _XKB_RULES_NAMES system_u:object_r:info_xproperty_t + +# Clipboard and selection properties +property CUT_BUFFER0 system_u:object_r:clipboard_xproperty_t +property CUT_BUFFER1 system_u:object_r:clipboard_xproperty_t +property CUT_BUFFER2 system_u:object_r:clipboard_xproperty_t +property CUT_BUFFER3 system_u:object_r:clipboard_xproperty_t +property CUT_BUFFER4 system_u:object_r:clipboard_xproperty_t +property CUT_BUFFER5 system_u:object_r:clipboard_xproperty_t +property CUT_BUFFER6 system_u:object_r:clipboard_xproperty_t +property CUT_BUFFER7 system_u:object_r:clipboard_xproperty_t + +# Default fallback type +property * system_u:object_r:xproperty_t + + +# +## +### Rules for X Extensions +## +# + +# +# Extension rules map an extension name to a context. A default extension +# rule indicated by an asterisk should follow all other extension rules. +# +# Standard extensions +extension BIG-REQUESTS system_u:object_r:std_xext_t +extension SHAPE system_u:object_r:std_xext_t +extension SYNC system_u:object_r:std_xext_t +extension XC-MISC system_u:object_r:std_xext_t +extension XFIXES system_u:object_r:std_xext_t +extension XInputExtension system_u:object_r:std_xext_t +extension XKEYBOARD system_u:object_r:std_xext_t +extension DAMAGE system_u:object_r:std_xext_t +extension RENDER system_u:object_r:std_xext_t +extension XINERAMA system_u:object_r:std_xext_t + +# Direct hardware access extensions +extension XFree86-DGA system_u:object_r:directhw_xext_t +extension XFree86-VidModeExtension system_u:object_r:directhw_xext_t + +# Screen management and multihead extensions +extension RANDR system_u:object_r:output_xext_t +extension Composite system_u:object_r:output_xext_t + +# Screensaver, power management extensions +extension DPMS system_u:object_r:screensaver_xext_t +extension MIT-SCREEN-SAVER system_u:object_r:screensaver_xext_t + +# Shared memory extensions +extension MIT-SHM system_u:object_r:shmem_xext_t +extension XFree86-Bigfont system_u:object_r:shmem_xext_t + +# Accelerated graphics, OpenGL, direct rendering extensions +extension GLX system_u:object_r:accelgraphics_xext_t +extension NV-CONTROL system_u:object_r:accelgraphics_xext_t +extension NV-GLX system_u:object_r:accelgraphics_xext_t +extension NVIDIA-GLX system_u:object_r:accelgraphics_xext_t + +# Debugging, testing, and recording extensions +extension RECORD system_u:object_r:debug_xext_t +extension X-Resource system_u:object_r:debug_xext_t +extension XTEST system_u:object_r:debug_xext_t + +# Security-related extensions +extension SECURITY system_u:object_r:security_xext_t +extension SELinux system_u:object_r:security_xext_t +extension XAccessControlExtension system_u:object_r:security_xext_t +extension XC-APPGROUP system_u:object_r:security_xext_t + +# Video extensions +extension XVideo system_u:object_r:video_xext_t +extension XVideo-MotionCompensation system_u:object_r:video_xext_t + +# Default fallback type +extension * system_u:object_r:xext_t + + +# +## +### Rules for X Selections +## +# + +# Selection rules map a selection name to a context. A default selection +# rule indicated by an asterisk should follow all other selection rules. +# +# Standard selections +selection XA_PRIMARY system_u:object_r:clipboard_xselection_t +selection XA_SECONDARY system_u:object_r:clipboard_xselection_t +selection PRIMARY system_u:object_r:clipboard_xselection_t +selection CLIPBOARD system_u:object_r:clipboard_xselection_t + +# Default fallback type +selection * system_u:object_r:xselection_t + + +# +## +### Rules for X Events +## +# + +# +# Event rules map an event protocol name to a context. A default event +# rule indicated by an asterisk should follow all other event rules. +# +# Input events +event X11:KeyPress system_u:object_r:input_xevent_t +event X11:KeyRelease system_u:object_r:input_xevent_t +event X11:ButtonPress system_u:object_r:input_xevent_t +event X11:ButtonRelease system_u:object_r:input_xevent_t +event X11:MotionNotify system_u:object_r:input_xevent_t +event X11:SelectionNotify system_u:object_r:input_xevent_t +event XInputExtension:DeviceKeyPress system_u:object_r:input_xevent_t +event XInputExtension:DeviceKeyRelease system_u:object_r:input_xevent_t +event XInputExtension:DeviceButtonPress system_u:object_r:input_xevent_t +event XInputExtension:DeviceButtonRelease system_u:object_r:input_xevent_t +event XInputExtension:DeviceMotionNotify system_u:object_r:input_xevent_t +event XInputExtension:DeviceValuator system_u:object_r:input_xevent_t +event XInputExtension:ProximityIn system_u:object_r:input_xevent_t +event XInputExtension:ProximityOut system_u:object_r:input_xevent_t + +# Focus events +event X11:FocusIn system_u:object_r:focus_xevent_t +event X11:FocusOut system_u:object_r:focus_xevent_t +event X11:EnterNotify system_u:object_r:focus_xevent_t +event X11:LeaveNotify system_u:object_r:focus_xevent_t + +# Property events +event X11:PropertyNotify system_u:object_r:property_xevent_t + +# Client message events +event X11:ClientMessage system_u:object_r:client_xevent_t + +# Manager events +event X11:ConfigureRequest system_u:object_r:manage_xevent_t +event X11:ResizeRequest system_u:object_r:manage_xevent_t +event X11:MapRequest system_u:object_r:manage_xevent_t +event X11:CirculateRequest system_u:object_r:manage_xevent_t +event X11:CreateNotify system_u:object_r:manage_xevent_t +event X11:DestroyNotify system_u:object_r:manage_xevent_t +event X11:MapNotify system_u:object_r:manage_xevent_t +event X11:UnmapNotify system_u:object_r:manage_xevent_t +event X11:ReparentNotify system_u:object_r:manage_xevent_t +event X11:ConfigureNotify system_u:object_r:manage_xevent_t +event X11:GravityNotify system_u:object_r:manage_xevent_t +event X11:CirculateNotify system_u:object_r:manage_xevent_t +event X11:Expose system_u:object_r:manage_xevent_t +event X11:VisibilityNotify system_u:object_r:manage_xevent_t + +# Unknown events (that are not registered in the X server's name database) +event <unknown> system_u:object_r:unknown_xevent_t + +# Default fallback type +event * system_u:object_r:xevent_t |