summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorEamon Walsh <ewalsh@tycho.nsa.gov>2009-06-26 16:50:12 -0400
committerEamon Walsh <ewalsh@tycho.nsa.gov>2009-06-26 17:05:52 -0400
commit51105de9b0d865c4b5e5a7d9ab23c89d808d1cfa (patch)
tree833821b0d0f6b3ae62a1e897d2f7845f56c26177
parent10812204b3415c969bcebd3215e84d758a0b4dd8 (diff)
xselinux: ignore property hook calls with the new Post access mode bit set.
Signed-off-by: Eamon Walsh <ewalsh@tycho.nsa.gov>
-rw-r--r--Xext/xselinux.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/Xext/xselinux.c b/Xext/xselinux.c
index 9898b2986..805423074 100644
--- a/Xext/xselinux.c
+++ b/Xext/xselinux.c
@@ -913,6 +913,10 @@ SELinuxProperty(CallbackListPtr *pcbl, pointer unused, pointer calldata)
security_id_t tsid;
int rc;
+ /* Don't care about the new content check */
+ if (rec->access_mode & DixPostAccess)
+ return;
+
subj = dixLookupPrivate(&rec->client->devPrivates, subjectKey);
obj = dixLookupPrivate(&pProp->devPrivates, objectKey);