More consolekit_t and dbus_t AVCs (from today's Rawhide)

[Tom London]

After doing today's rawhide thing, get this on targeted/enforcing boot/login:

#============= system_dbusd_t ==============
allow system_dbusd_t NetworkManager_t:dbus send_msg;
allow system_dbusd_t unconfined_t:dbus send_msg;

#============= xdm_t ==============
allow xdm_t consolekit_var_run_t:dir search;

[copy of /var/log/audit/audit.log attached.]

tom

[Tom London]

On Sun, Feb 10, 2008 at 12:34 PM, Tom London  wrote:
> After doing today's rawhide thing, get this on targeted/enforcing boot/login:
>
> #============= system_dbusd_t ==============
>  allow system_dbusd_t NetworkManager_t:dbus send_msg;
>  allow system_dbusd_t unconfined_t:dbus send_msg;
>
> #============= xdm_t ==============
>  allow xdm_t consolekit_var_run_t:dir search;
>
> [copy of /var/log/audit/audit.log attached.]

Sorry, got a few more in permissive mode:

#============= system_dbusd_t ==============
allow system_dbusd_t NetworkManager_t:dbus send_msg;
allow system_dbusd_t unconfined_t:dbus send_msg;

#============= xdm_t ==============
allow xdm_t consolekit_var_run_t:dir search;
allow xdm_t consolekit_var_run_t:file { read getattr };

[complete audit.log attached.]

tom