From 4a8cc895ccdb64945661747c75a118deea96b53a Mon Sep 17 00:00:00 2001 From: Eamon Walsh Date: Tue, 15 Sep 2009 19:41:04 -0400 Subject: xselinux: Stop special-casing QueryPointer access checks. XACE has been changed to not return BadAccess on device read failures. Thus, no need for this workaround code. [Backport to 1.6] Signed-off-by: Eamon Walsh --- Xext/xselinux.c | 11 ----------- 1 file changed, 11 deletions(-) diff --git a/Xext/xselinux.c b/Xext/xselinux.c index 3124eb9b7..238bdb5d5 100644 --- a/Xext/xselinux.c +++ b/Xext/xselinux.c @@ -714,17 +714,6 @@ SELinuxDevice(CallbackListPtr *pcbl, pointer unused, pointer calldata) } } - /* XXX only check read permission on XQueryKeymap */ - /* This is to allow the numerous apps that call XQueryPointer to work */ - if (rec->access_mode & DixReadAccess) { - ClientPtr client = rec->client; - REQUEST(xReq); - if (stuff && stuff->reqType != X_QueryKeymap) { - rec->access_mode &= ~DixReadAccess; - rec->access_mode |= DixGetAttrAccess; - } - } - rc = SELinuxDoCheck(subj, obj, SECCLASS_X_DEVICE, rec->access_mode, &auditdata); if (rc != Success) -- cgit v1.2.3