| xf.li | 8611891 | 2025-03-19 20:07:27 -0700 | [diff] [blame^] | 1 | # |
| 2 | # Config file for XSELinux extension |
| 3 | # |
| 4 | |
| 5 | |
| 6 | # |
| 7 | ## |
| 8 | ### Rules for X Clients |
| 9 | ## |
| 10 | # |
| 11 | |
| 12 | # |
| 13 | # The default client rule defines a context to be used for all clients |
| 14 | # connecting to the server from a remote host. |
| 15 | # |
| 16 | client * system_u:object_r:remote_t:s0 |
| 17 | |
| 18 | |
| 19 | # |
| 20 | ## |
| 21 | ### Rules for X Properties |
| 22 | ## |
| 23 | # |
| 24 | |
| 25 | # |
| 26 | # Property rules map a property name to a context. A default property |
| 27 | # rule indicated by an asterisk should follow all other property rules. |
| 28 | # |
| 29 | # Properties that normal clients may only read |
| 30 | property _SELINUX_* system_u:object_r:seclabel_xproperty_t:s0 |
| 31 | |
| 32 | # Clipboard and selection properties |
| 33 | property CUT_BUFFER? system_u:object_r:clipboard_xproperty_t:s0 |
| 34 | |
| 35 | # Default fallback type |
| 36 | property * system_u:object_r:xproperty_t:s0 |
| 37 | |
| 38 | |
| 39 | # |
| 40 | ## |
| 41 | ### Rules for X Extensions |
| 42 | ## |
| 43 | # |
| 44 | |
| 45 | # |
| 46 | # Extension rules map an extension name to a context. A default extension |
| 47 | # rule indicated by an asterisk should follow all other extension rules. |
| 48 | # |
| 49 | # Restricted extensions |
| 50 | extension SELinux system_u:object_r:security_xextension_t:s0 |
| 51 | |
| 52 | # Standard extensions |
| 53 | extension * system_u:object_r:xextension_t:s0 |
| 54 | |
| 55 | |
| 56 | # |
| 57 | ## |
| 58 | ### Rules for X Selections |
| 59 | ## |
| 60 | # |
| 61 | |
| 62 | # Selection rules map a selection name to a context. A default selection |
| 63 | # rule indicated by an asterisk should follow all other selection rules. |
| 64 | # |
| 65 | # Standard selections |
| 66 | selection PRIMARY system_u:object_r:clipboard_xselection_t:s0 |
| 67 | selection CLIPBOARD system_u:object_r:clipboard_xselection_t:s0 |
| 68 | |
| 69 | # Default fallback type |
| 70 | selection * system_u:object_r:xselection_t:s0 |
| 71 | |
| 72 | |
| 73 | # |
| 74 | ## |
| 75 | ### Rules for X Events |
| 76 | ## |
| 77 | # |
| 78 | |
| 79 | # |
| 80 | # Event rules map an event protocol name to a context. A default event |
| 81 | # rule indicated by an asterisk should follow all other event rules. |
| 82 | # |
| 83 | # Input events |
| 84 | event X11:KeyPress system_u:object_r:input_xevent_t:s0 |
| 85 | event X11:KeyRelease system_u:object_r:input_xevent_t:s0 |
| 86 | event X11:ButtonPress system_u:object_r:input_xevent_t:s0 |
| 87 | event X11:ButtonRelease system_u:object_r:input_xevent_t:s0 |
| 88 | event X11:MotionNotify system_u:object_r:input_xevent_t:s0 |
| 89 | event XInputExtension:DeviceKeyPress system_u:object_r:input_xevent_t:s0 |
| 90 | event XInputExtension:DeviceKeyRelease system_u:object_r:input_xevent_t:s0 |
| 91 | event XInputExtension:DeviceButtonPress system_u:object_r:input_xevent_t:s0 |
| 92 | event XInputExtension:DeviceButtonRelease system_u:object_r:input_xevent_t:s0 |
| 93 | event XInputExtension:DeviceMotionNotify system_u:object_r:input_xevent_t:s0 |
| 94 | event XInputExtension:DeviceValuator system_u:object_r:input_xevent_t:s0 |
| 95 | event XInputExtension:ProximityIn system_u:object_r:input_xevent_t:s0 |
| 96 | event XInputExtension:ProximityOut system_u:object_r:input_xevent_t:s0 |
| 97 | |
| 98 | # Client message events |
| 99 | event X11:ClientMessage system_u:object_r:client_xevent_t:s0 |
| 100 | event X11:SelectionNotify system_u:object_r:client_xevent_t:s0 |
| 101 | event X11:UnmapNotify system_u:object_r:client_xevent_t:s0 |
| 102 | event X11:ConfigureNotify system_u:object_r:client_xevent_t:s0 |
| 103 | |
| 104 | # Default fallback type |
| 105 | event * system_u:object_r:xevent_t:s0 |