From 3bbd77ff98478153afe3251de9ba11d757218213 Mon Sep 17 00:00:00 2001 From: Eamon Walsh Date: Thu, 20 Mar 2008 20:03:02 -0400 Subject: [PATCH] XSELinux: Do a check for whether background "None" is allowed. --- Xext/xselinux.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/Xext/xselinux.c b/Xext/xselinux.c index 303589860..17ce7af10 100644 --- a/Xext/xselinux.c +++ b/Xext/xselinux.c @@ -1026,6 +1026,13 @@ SELinuxResource(CallbackListPtr *pcbl, pointer unused, pointer calldata) rc = SELinuxDoCheck(subj, obj, class, access_mode, &auditdata); if (rc != Success) rec->status = rc; + + /* Perform the background none check on windows */ + if (access_mode & DixCreateAccess && rec->rtype == RT_WINDOW) { + rc = SELinuxDoCheck(subj, obj, class, DixBlendAccess, &auditdata); + if (rc != Success) + ((WindowPtr)rec->res)->forcedBG = TRUE; + } } static void