Christian Göttsche cc194994fa selinux: only generate audit events for avc and error messages ...

Only generate audit events for messages of the type avc (permission
denied) and error (e.g. invalid context).
For example avoid USER_SELINUX_ERR for policy load events:
    audit[980]: USER_SELINUX_ERR pid=980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xorg_t:s0 msg='avc:  op=load_policy lsm=selinux seqno=8 res=1 exe="/usr/lib/xorg/Xorg" sauid=0 hostname=? addr=? terminal=?'

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Part-of: <https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/801>

2026-04-10 19:21:25 +02:00

..

namespace

xext: namespace: fix printf format string

2025-12-11 15:04:42 +01:00

bigreq.c

miext: move over extinit_priv.h from include

2025-06-12 17:21:46 +02:00

dpms.c

dix: add dixAllocServerXID()

2025-06-12 17:21:48 +02:00

dpmsproc.h

Xext: drop checking for HAVE_DIX_CONFIG_H

2025-06-12 16:50:20 +02:00

geext_priv.h

xext: add/fix include guards where missing/broken

2025-06-27 13:58:05 +02:00

geext.c

miext: move over extinit_priv.h from include

2025-06-12 17:21:46 +02:00

hashtable.c

xext: replace xallocarray() by calloc()

2025-06-12 17:21:43 +02:00

hashtable.h

Xext: hashtable.h: unexport functions not used by drivers

2025-06-12 16:51:36 +02:00

meson.build

treewide: remove "lib" prefix in static_library names (meson)

2025-07-03 12:01:52 +02:00

panoramiX.c

miext: move over extinit_priv.h from include

2025-06-12 17:21:46 +02:00

panoramiX.h

composite: clean up including panoramix headers

2025-06-12 17:21:43 +02:00

panoramiXh.h

xext: add/fix include guards where missing/broken

2025-06-27 13:58:05 +02:00

panoramiXprocs.c

panoramix: protect against allocaton failure

2025-06-12 17:21:44 +02:00

panoramiXsrv.h

panoramix: export PanoramiXTranslateVisualID for nvidia

2025-06-16 10:32:48 +02:00

panoramiXSwap.c

Xext: clean up including panoramix headers

2025-06-12 17:21:43 +02:00

saver.c

dix: clean up MakeWindowOptional() calls and add alloc fault checks

2025-06-12 17:21:48 +02:00

security.c

miext: move over extinit_priv.h from include

2025-06-12 17:21:46 +02:00

securitysrv.h

Xext: security: drop not needed include

2025-06-12 16:30:13 +02:00

shape.c

Xext: shape: fix non-ximerama build

2025-08-12 11:07:24 +02:00

shm.c

os: unexport internal logging functions

2025-06-12 17:21:46 +02:00

shmint.h

xext: Fix shmint.h to not use headers outside of sdk_HEADERS

2013-11-14 10:22:15 +09:00

sleepuntil.c

Xext: use calloc() instead of malloc()

2025-06-12 16:48:11 +02:00

sleepuntil.h

Xext: drop checking for HAVE_DIX_CONFIG_H

2025-06-12 16:50:20 +02:00

sync.c

dix: add dixAllocServerXID()

2025-06-12 17:21:48 +02:00

syncsdk.h

xsync: Add resource inside of SyncCreate, export SyncCreate

2019-04-17 14:01:17 -07:00

syncsrv.h

sync: Convert from "CARD64" to int64_t.

2017-09-20 13:19:27 -04:00

vidmode.c

vidmode: fix ProcVidModeGetDotClocks() reply size computation

2025-07-18 01:59:17 +02:00

xace.c

xace: export XaceRegisterCallback() and XaceDeleteCallback()

2025-06-12 17:21:45 +02:00

xace.h

Xext: Fix typo in xace.h

2025-06-27 17:10:33 +02:00

xacestr.h

dix: move over private defintions from selection.h to private header

2025-06-12 17:21:46 +02:00

xcmisc.c

miext: move over extinit_priv.h from include

2025-06-12 17:21:46 +02:00

xf86bigfont.c

xf86bigfont: fix compiler warning on unused variable

2025-07-01 17:01:07 +02:00

xf86bigfontsrv.h

Move extension initialisation prototypes into extinit.h

2012-07-09 23:06:41 -07:00

xres.c

Xext: xres: fix XResQueryClientResources request

2025-08-27 10:06:22 +02:00

xselinux_ext.c

dix: move over private defintions from selection.h to private header

2025-06-12 17:21:46 +02:00

xselinux_hooks.c

selinux: only generate audit events for avc and error messages

2026-04-10 19:21:25 +02:00

xselinux_label.c

drop obsolete HAVE_DIX_CONFIG_H

2024-10-10 13:38:31 +00:00

xselinux.h

include: unpexport SELINUX_* consts from include/global.h

2024-03-25 19:40:04 +00:00

xselinuxint.h

include: drop obsolete registry.h

2024-03-03 23:20:06 +00:00

xtest.c

miext: move over extinit_priv.h from include

2025-06-12 17:21:46 +02:00

xvdisp.c

Xext: clean up including panoramix headers

2025-06-12 17:21:43 +02:00

xvdisp.h

xext: add/fix include guards where missing/broken

2025-06-27 13:58:05 +02:00

xvdix_priv.h

Xext: xv: fix redefinition of typedef 'XvPortNotifyPtr'

2025-08-05 18:59:43 +02:00

xvdix.h

treewide: preemptively revert !1714 where it affects ABI compatibility

2025-06-16 10:32:48 +02:00

xvmain.c

miext: move over extinit_priv.h from include

2025-06-12 17:21:46 +02:00

xvmc.c

xres/xkb/xvmc/modesetting: Fix incorrect pointer data size usage

2025-06-13 13:01:24 +02:00

xvmcext.h

xvmc: unexport XvMCFindXvImage()

2024-10-10 19:59:48 +00:00