Christian Göttsche
f38c692ff8
selinux: remap security classes on policyload ...
Re-map the SELinux security classes on policy loads, as the mapping will
be desynchronized (see man:selinux_set_mapping(3)) and audit messages
will not show the actual class and permission names:
USER_AVC pid=24283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xorg_t:s0 msg='avc: denied { 0x10 } for request=XFIXES:SelectSelectionInput comm=/usr/bin/python3 resid=6400001 restype=WINDOW scontext=xuser_u:xuser_r:systemd_user_instance_generic_bin_t:s0 tcontext=xuser_u:object_r:xorg_t:s0 tclass=(null) permissive=1
In addition use type-safe assignments.
Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Part-of: <https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/801 >
2026-04-21 10:45:12 +02:00
xext: namespace: fix printf format string
2025-12-11 15:04:42 +01:00
miext: move over extinit_priv.h from include
2025-06-12 17:21:46 +02:00
dix: add dixAllocServerXID()
2025-06-12 17:21:48 +02:00
Xext: drop checking for HAVE_DIX_CONFIG_H
2025-06-12 16:50:20 +02:00
miext: move over extinit_priv.h from include
2025-06-12 17:21:46 +02:00
xext: add/fix include guards where missing/broken
2025-06-27 13:58:05 +02:00
xext: replace xallocarray() by calloc()
2025-06-12 17:21:43 +02:00
Xext: hashtable.h: unexport functions not used by drivers
2025-06-12 16:51:36 +02:00
treewide: remove "lib" prefix in static_library names (meson)
2025-07-03 12:01:52 +02:00
miext: move over extinit_priv.h from include
2025-06-12 17:21:46 +02:00
composite: clean up including panoramix headers
2025-06-12 17:21:43 +02:00
xext: add/fix include guards where missing/broken
2025-06-27 13:58:05 +02:00
panoramix: protect against allocaton failure
2025-06-12 17:21:44 +02:00
panoramix: export PanoramiXTranslateVisualID for nvidia
2025-06-16 10:32:48 +02:00
Xext: clean up including panoramix headers
2025-06-12 17:21:43 +02:00
dix: clean up MakeWindowOptional() calls and add alloc fault checks
2025-06-12 17:21:48 +02:00
miext: move over extinit_priv.h from include
2025-06-12 17:21:46 +02:00
Xext: security: drop not needed include
2025-06-12 16:30:13 +02:00
Xext: shape: fix non-ximerama build
2025-08-12 11:07:24 +02:00
os: unexport internal logging functions
2025-06-12 17:21:46 +02:00
Xext: use calloc() instead of malloc()
2025-06-12 16:48:11 +02:00
Xext: drop checking for HAVE_DIX_CONFIG_H
2025-06-12 16:50:20 +02:00
dix: add dixAllocServerXID()
2025-06-12 17:21:48 +02:00
vidmode: fix ProcVidModeGetDotClocks() reply size computation
2025-07-18 01:59:17 +02:00
xace: export XaceRegisterCallback() and XaceDeleteCallback()
2025-06-12 17:21:45 +02:00
Xext: Fix typo in xace.h
2025-06-27 17:10:33 +02:00
dix: move over private defintions from selection.h to private header
2025-06-12 17:21:46 +02:00
miext: move over extinit_priv.h from include
2025-06-12 17:21:46 +02:00
xf86bigfont: fix compiler warning on unused variable
2025-07-01 17:01:07 +02:00
Xext: xres: fix XResQueryClientResources request
2025-08-27 10:06:22 +02:00
dix: move over private defintions from selection.h to private header
2025-06-12 17:21:46 +02:00
selinux: remap security classes on policyload
2026-04-21 10:45:12 +02:00
drop obsolete HAVE_DIX_CONFIG_H
2024-10-10 13:38:31 +00:00
miext: move over extinit_priv.h from include
2025-06-12 17:21:46 +02:00
Xext: clean up including panoramix headers
2025-06-12 17:21:43 +02:00
xext: add/fix include guards where missing/broken
2025-06-27 13:58:05 +02:00
treewide: preemptively revert !1714 where it affects ABI compatibility
2025-06-16 10:32:48 +02:00
Xext: xv: fix redefinition of typedef 'XvPortNotifyPtr'
2025-08-05 18:59:43 +02:00
miext: move over extinit_priv.h from include
2025-06-12 17:21:46 +02:00
xres/xkb/xvmc/modesetting: Fix incorrect pointer data size usage
2025-06-13 13:01:24 +02:00
xvmc: unexport XvMCFindXvImage()
2024-10-10 19:59:48 +00:00
f38c692ff8