[root@trident ~]# audit2allow -R -i x-denials.log require { type staff_t; type staff_dbusd_t; type accelgraphics_xext_t; type info_xproperty_t; type security_xext_t; type unknown_xext_t; type default_xevent_t; type std_xext_t; type default_xproperty_t; type video_xext_t; type focus_xevent_t; type property_xevent_t; type debug_xext_t; type screensaver_xext_t; type unknown_xevent_t; type xdm_xserver_t; type manage_xevent_t; type shmem_xext_t; type clipboard_xselection_t; type output_xext_t; type disallowed_xext_t; type default_xselection_t; type input_xevent_t; type xdm_t; class x_colormap { add_color use install read create uninstall }; class x_gc { use setattr create getattr destroy }; class x_event { receive send }; class x_extension { query use }; class x_device { setfocus setattr bell read freeze getattr getfocus grab }; class x_selection { read getattr setattr }; class x_cursor { write destroy create use }; class x_drawable { get_property show read manage add_child remove_child list_child hide setattr receive create send write getattr override destroy set_property }; class x_client { destroy manage }; class x_property { write read destroy create }; class x_screen { saver_setattr saver_getattr setattr }; class x_resource { read write }; class x_server { grab manage getattr }; } #============= staff_dbusd_t ============== allow staff_dbusd_t accelgraphics_xext_t:x_extension query; allow staff_dbusd_t debug_xext_t:x_extension query; allow staff_dbusd_t default_xevent_t:x_event receive; allow staff_dbusd_t default_xproperty_t:x_property { write read create }; allow staff_dbusd_t default_xselection_t:x_selection { getattr setattr }; allow staff_dbusd_t disallowed_xext_t:x_extension { query use }; allow staff_dbusd_t focus_xevent_t:x_event receive; allow staff_dbusd_t info_xproperty_t:x_property { read write }; allow staff_dbusd_t input_xevent_t:x_event receive; allow staff_dbusd_t manage_xevent_t:x_event receive; allow staff_dbusd_t output_xext_t:x_extension query; allow staff_dbusd_t property_xevent_t:x_event receive; allow staff_dbusd_t screensaver_xext_t:x_extension query; allow staff_dbusd_t security_xext_t:x_extension query; allow staff_dbusd_t self:x_client { destroy manage }; allow staff_dbusd_t self:x_drawable { write read create getattr }; allow staff_dbusd_t self:x_gc { destroy create use setattr }; allow staff_dbusd_t shmem_xext_t:x_extension { query use }; allow staff_dbusd_t std_xext_t:x_extension { query use }; allow staff_dbusd_t unknown_xevent_t:x_event { receive send }; allow staff_dbusd_t unknown_xext_t:x_extension query; allow staff_dbusd_t video_xext_t:x_extension query; allow staff_dbusd_t xdm_xserver_t:x_colormap use; allow staff_dbusd_t xdm_xserver_t:x_device { read getattr getfocus grab setattr }; allow staff_dbusd_t xdm_xserver_t:x_drawable { get_property setattr show receive create manage send add_child write read getattr list_child override set_property }; allow staff_dbusd_t xdm_xserver_t:x_screen { saver_setattr saver_getattr }; allow staff_dbusd_t xdm_xserver_t:x_server { grab manage getattr }; #============= staff_t ============== allow staff_t accelgraphics_xext_t:x_extension query; allow staff_t clipboard_xselection_t:x_selection { read getattr }; allow staff_t debug_xext_t:x_extension { query use }; allow staff_t default_xevent_t:x_event receive; allow staff_t default_xproperty_t:x_property { write read create destroy }; allow staff_t default_xselection_t:x_selection { getattr setattr }; allow staff_t disallowed_xext_t:x_extension { query use }; allow staff_t focus_xevent_t:x_event receive; allow staff_t info_xproperty_t:x_property { read write create }; allow staff_t input_xevent_t:x_event receive; allow staff_t manage_xevent_t:x_event { receive send }; allow staff_t output_xext_t:x_extension { query use }; allow staff_t property_xevent_t:x_event receive; allow staff_t screensaver_xext_t:x_extension { query use }; allow staff_t security_xext_t:x_extension query; allow staff_t self:x_client manage; allow staff_t self:x_colormap create; allow staff_t self:x_cursor { write destroy create use }; allow staff_t self:x_drawable { write getattr read destroy create add_child }; allow staff_t self:x_gc { destroy create use setattr getattr }; allow staff_t self:x_resource { read write }; allow staff_t shmem_xext_t:x_extension { query use }; allow staff_t staff_dbusd_t:x_client destroy; allow staff_t staff_dbusd_t:x_drawable getattr; allow staff_t std_xext_t:x_extension { query use }; allow staff_t unknown_xevent_t:x_event { receive send }; allow staff_t unknown_xext_t:x_extension query; allow staff_t video_xext_t:x_extension query; allow staff_t xdm_xserver_t:x_colormap { add_color read use install uninstall }; allow staff_t xdm_xserver_t:x_device { setfocus setattr bell read freeze getattr getfocus grab }; allow staff_t xdm_xserver_t:x_drawable { get_property show read manage add_child remove_child list_child hide setattr receive create send write getattr override destroy set_property }; allow staff_t xdm_xserver_t:x_resource read; allow staff_t xdm_xserver_t:x_screen setattr; allow staff_t xdm_xserver_t:x_server { grab manage }; #============= xdm_t ============== allow xdm_t xdm_xserver_t:x_colormap { read add_color use }; allow xdm_t xdm_xserver_t:x_drawable { get_property show manage add_child remove_child list_child hide setattr receive create send write getattr override destroy set_property }; #============= xdm_xserver_t ============== allow xdm_xserver_t self:x_drawable send;