From 51105de9b0d865c4b5e5a7d9ab23c89d808d1cfa Mon Sep 17 00:00:00 2001
From: Eamon Walsh <ewalsh@tycho.nsa.gov>
Date: Fri, 26 Jun 2009 16:50:12 -0400
Subject: [PATCH] xselinux: ignore property hook calls with the new Post access
 mode bit set.

Signed-off-by: Eamon Walsh <ewalsh@tycho.nsa.gov>
---
 Xext/xselinux.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Xext/xselinux.c b/Xext/xselinux.c
index 9898b2986..805423074 100644
--- a/Xext/xselinux.c
+++ b/Xext/xselinux.c
@@ -913,6 +913,10 @@ SELinuxProperty(CallbackListPtr *pcbl, pointer unused, pointer calldata)
     security_id_t tsid;
     int rc;
 
+    /* Don't care about the new content check */
+    if (rec->access_mode & DixPostAccess)
+	return;
+
     subj = dixLookupPrivate(&rec->client->devPrivates, subjectKey);
     obj = dixLookupPrivate(&pProp->devPrivates, objectKey);