summaryrefslogtreecommitdiff
path: root/Xext/XSELinuxConfig
blob: 66f93c56d646a64b737e551d8a2190be0923f926 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
#
# Config file for XSELinux extension
#

#
# The default client rule defines a context to be used for all clients
# connecting to the server from a remote host.
#
client	*				system_u:object_r:remote_xclient_t:s0

#
# Property rules map a property name to a context.  A default property
# rule indicated by an asterisk should follow all other property rules.
#
# Properties set by typical clients: WM, _NET_WM, etc.
property WM_NAME			system_u:object_r:client_xproperty_t:s0
property WM_CLASS			system_u:object_r:client_xproperty_t:s0
property WM_ICON_NAME			system_u:object_r:client_xproperty_t:s0
property WM_HINTS			system_u:object_r:client_xproperty_t:s0
property WM_NORMAL_HINTS		system_u:object_r:client_xproperty_t:s0
property WM_COMMAND			system_u:object_r:client_xproperty_t:s0
property WM_CLIENT_MACHINE		system_u:object_r:client_xproperty_t:s0
property WM_LOCALE_NAME			system_u:object_r:client_xproperty_t:s0
property WM_CLIENT_LEADER		system_u:object_r:client_xproperty_t:s0
property WM_STATE			system_u:object_r:client_xproperty_t:s0
property WM_PROTOCOLS			system_u:object_r:client_xproperty_t:s0
property WM_WINDOW_ROLE			system_u:object_r:client_xproperty_t:s0
property WM_TRANSIENT_FOR		system_u:object_r:client_xproperty_t:s0
property _NET_WM_NAME			system_u:object_r:client_xproperty_t:s0
property _NET_WM_ICON			system_u:object_r:client_xproperty_t:s0
property _NET_WM_ICON_NAME		system_u:object_r:client_xproperty_t:s0
property _NET_WM_PID			system_u:object_r:client_xproperty_t:s0
property _NET_WM_STATE			system_u:object_r:client_xproperty_t:s0
property _NET_WM_DESKTOP		system_u:object_r:client_xproperty_t:s0
property _NET_WM_SYNC_REQUEST_COUNTER	system_u:object_r:client_xproperty_t:s0
property _NET_WM_WINDOW_TYPE		system_u:object_r:client_xproperty_t:s0
property _NET_WM_USER_TIME		system_u:object_r:client_xproperty_t:s0
property _MOTIF_DRAG_RECEIVER_INFO	system_u:object_r:client_xproperty_t:s0
property XdndAware			system_u:object_r:client_xproperty_t:s0

# Properties written by xrdb
property RESOURCE_MANAGER		system_u:object_r:rm_xproperty_t:s0
property SCREEN_RESOURCES		system_u:object_r:rm_xproperty_t:s0

# Properties written by window managers
property _MIT_PRIORITY_COLORS		system_u:object_r:wm_xproperty_t:s0

# Properties used for security labeling
property _SELINUX_CLIENT_CONTEXT	system_u:object_r:seclabel_xproperty_t:s0

# Properties used to communicate screen information
property XFree86_VT			system_u:object_r:info_xproperty_t:s0
property XFree86_DDC_EDID1_RAWDATA	system_u:object_r:info_xproperty_t:s0

# Clipboard and selection properties
property CUT_BUFFER0			system_u:object_r:clipboard_xproperty_t:s0
property CUT_BUFFER1			system_u:object_r:clipboard_xproperty_t:s0
property CUT_BUFFER2			system_u:object_r:clipboard_xproperty_t:s0
property CUT_BUFFER3			system_u:object_r:clipboard_xproperty_t:s0
property CUT_BUFFER4			system_u:object_r:clipboard_xproperty_t:s0
property CUT_BUFFER5			system_u:object_r:clipboard_xproperty_t:s0
property CUT_BUFFER6			system_u:object_r:clipboard_xproperty_t:s0
property CUT_BUFFER7			system_u:object_r:clipboard_xproperty_t:s0
property _XT_SELECTION_0		system_u:object_r:clipboard_xproperty_t:s0

# Default fallback type
property *	   			system_u:object_r:unknown_xproperty_t:s0

#
# Extension rules map an extension name to a context.  A default extension
# rule indicated by an asterisk should follow all other extension rules.
#
# Standard extensions
extension BIG-REQUESTS			system_u:object_r:std_xext_t:s0
extension DOUBLE-BUFFER			system_u:object_r:std_xext_t:s0
extension Extended-Visual-Information	system_u:object_r:std_xext_t:s0
extension MIT-SUNDRY-NONSTANDARD	system_u:object_r:std_xext_t:s0
extension SHAPE				system_u:object_r:std_xext_t:s0
extension SYNC				system_u:object_r:std_xext_t:s0
extension XC-MISC			system_u:object_r:std_xext_t:s0
extension XFIXES			system_u:object_r:std_xext_t:s0
extension XFree86-Misc			system_u:object_r:std_xext_t:s0
extension XpExtension                   system_u:object_r:std_xext_t:s0

# Screen management and multihead extensions
extension RANDR				system_u:object_r:output_xext_t:s0
extension XINERAMA			system_u:object_r:std_xext_t:s0

# Input extensions
extension XInputExtension		system_u:object_r:input_xext_t:s0
extension XKEYBOARD			system_u:object_r:input_xext_t:s0

# Screensaver, power management extensions
extension DPMS				system_u:object_r:screensaver_xext_t:s0
extension MIT-SCREEN-SAVER		system_u:object_r:screensaver_xext_t:s0

# Fonting extensions
extension FontCache			system_u:object_r:font_xext_t:s0
extension XFree86-Bigfont		system_u:object_r:font_xext_t:s0

# Shared memory extensions
extension MIT-SHM			system_u:object_r:shmem_xext_t:s0

# Accelerated graphics, OpenGL, direct rendering extensions
extension DAMAGE			system_u:object_r:accelgraphics_xext_t:s0
extension GLX				system_u:object_r:accelgraphics_xext_t:s0
extension NV-CONTROL			system_u:object_r:accelgraphics_xext_t:s0
extension NV-GLX			system_u:object_r:accelgraphics_xext_t:s0
extension NVIDIA-GLX			system_u:object_r:accelgraphics_xext_t:s0
extension RENDER			system_u:object_r:std_xext_t:s0
extension XFree86-DGA			system_u:object_r:accelgraphics_xext_t:s0

# Debugging, testing, and recording extensions
extension RECORD			system_u:object_r:debug_xext_t:s0
extension X-Resource			system_u:object_r:debug_xext_t:s0
extension XTEST				system_u:object_r:debug_xext_t:s0

# Extensions just for window managers
extension TOG-CUP			system_u:object_r:windowmgr_xext_t:s0

# Security-related extensions
extension SECURITY			system_u:object_r:security_xext_t:s0
extension SELinux			system_u:object_r:security_xext_t:s0
extension XAccessControlExtension	system_u:object_r:security_xext_t:s0
extension XC-APPGROUP			system_u:object_r:security_xext_t:s0

# Video extensions
extension XFree86-VidModeExtension	system_u:object_r:video_xext_t:s0
extension XVideo			system_u:object_r:video_xext_t:s0
extension XVideo-MotionCompensation	system_u:object_r:video_xext_t:s0

# Default fallback type
extension *	   			system_u:object_r:unknown_xext_t:s0