Christian Göttsche 2fe0214c84 selinux: only generate audit events for avc and error messages ...

Only generate audit events for messages of the type avc (permission
denied) and error (e.g. invalid context).
For example avoid USER_SELINUX_ERR for policy load events:
    audit[980]: USER_SELINUX_ERR pid=980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xorg_t:s0 msg='avc:  op=load_policy lsm=selinux seqno=8 res=1 exe="/usr/lib/xorg/Xorg" sauid=0 hostname=? addr=? terminal=?'

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Part-of: <https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/801>

2026-04-13 12:40:10 +02:00

..

damage

Xext: damage: rename "screen" to "pScreen" in DamageExtSubtractWindowClip()

2026-02-09 14:20:04 +01:00

dri2

[PR #2177] dri2: little spelling fix

2026-04-13 12:40:10 +02:00

namespace

Xext: namespace: Allow using tabs as delimeters

2026-01-22 08:57:15 +01:00

bigreq.c

Xext: bigreq: use REQUEST_HEAD_STRUCT and REQUEST_FIELD_* macros

2025-12-21 11:54:12 +01:00

dpms.c

Xext: dpms: use REQUEST_HEAD_STRUCT and REQUEST_FIELD_* macros

2026-01-01 13:23:22 +01:00

dpmsproc.h

xext: move include guards up to wrap the whole file

2025-11-21 15:20:11 +01:00

geext_priv.h

xext: add/fix include guards where missing/broken

2025-06-27 13:58:05 +02:00

geext.c

Xext: geext: use REQUEST_HEAD_STRUCT and REQUEST_FIELD_* macros

2025-12-21 11:54:29 +01:00

hashtable.c

xext: replace xallocarray() by calloc()

2025-06-12 17:21:43 +02:00

hashtable.h

Xext: hashtable.h: unexport functions not used by drivers

2025-06-12 16:51:36 +02:00

meson.build

Xext: move over public SDK headers to include/

2026-02-12 19:00:42 +01:00

panoramiX.c

Xext: replace DDXPoint by xPoint

2026-02-10 16:00:04 +01:00

panoramiX.h

xext: move include guards up to wrap the whole file

2025-11-21 15:20:11 +01:00

panoramiXh.h

Xext: panoramix: inline SProc*()'s

2025-09-17 09:46:27 +02:00

panoramiXprocs.c

Xext: replace DDXPoint by xPoint

2026-02-10 16:00:04 +01:00

panoramiXsrv.h

xext: move include guards up to wrap the whole file

2025-11-21 15:20:11 +01:00

saver.c

Treewide: Fix typos

2026-03-16 13:11:07 +01:00

security.c

Xext: security: use REQUEST_HEAD_STRUCT and REQUEST_FIELD_* macros

2025-12-21 12:04:33 +01:00

securitysrv.h

Xext: security: drop not needed include

2025-06-12 16:30:13 +02:00

shape.c

Xext: shape: use REQUEST_HEAD_STRUCT and REQUEST_FIELD_* macros

2026-02-06 12:03:24 +01:00

shm_priv.h

Xext: move over public SDK headers to include/

2026-02-12 19:00:42 +01:00

shm.c

Xext: move over public SDK headers to include/

2026-02-12 19:00:42 +01:00

sleepuntil.c

Xext: sleepuntil: drop obsolete support for internal server reset

2025-11-20 19:26:00 +01:00

sleepuntil.h

xext: move include guards up to wrap the whole file

2025-11-21 15:20:11 +01:00

sync.c

Xext: move over public SDK headers to include/

2026-02-12 19:00:42 +01:00

syncsrv.h

sync: Convert from "CARD64" to int64_t.

2017-09-20 13:19:27 -04:00

xace.c

dix: replace XACE_SCREEN_ACCESS by direct callback

2025-10-22 13:53:25 +02:00

xace.h

treewide: don't include <region.h> anymore

2025-11-27 19:27:27 +01:00

xacestr.h

dix: replace XACE_SCREEN_ACCESS by direct callback

2025-10-22 13:53:25 +02:00

xcmisc.c

Xext: xcmisc: use REQUEST_HEAD_STRUCT and REQUEST_FIELD_* macros

2026-02-06 11:59:43 +01:00

xf86bigfont.c

Treewide: Fix typos

2026-03-16 13:11:07 +01:00

xf86bigfontsrv.h

…

xres.c

Xext: xres: ProcXResQueryClientIds() use x_rpcbuf_t

2026-02-03 15:45:26 +01:00

xselinux_ext.c

Xext: selinux: use REQUEST_HEAD_STRUCT and REQUEST_FIELD_* macros

2026-01-01 13:23:22 +01:00

xselinux_hooks.c

selinux: only generate audit events for avc and error messages

2026-04-13 12:40:10 +02:00

xselinux_label.c

Xext/xselinux: avoid memory leak in SELinuxAtomToSID()

2025-10-21 13:02:04 +02:00

xselinux.h

include: unpexport SELINUX_* consts from include/global.h

2024-03-25 19:40:04 +00:00

xselinuxint.h

include: drop obsolete registry.h

2024-03-03 23:20:06 +00:00

xtest.c

Xext: xtest: use REQUEST_HEAD_STRUCT and REQUEST_FIELD_* macros

2025-12-21 11:57:12 +01:00

xvdisp.c

Xext: move over public SDK headers to include/

2026-02-12 19:00:42 +01:00

xvdisp.h

xext: add/fix include guards where missing/broken

2025-06-27 13:58:05 +02:00

xvdix_priv.h

Xext: move over public SDK headers to include/

2026-02-12 19:00:42 +01:00

xvmain.c

xv: use embedded private instead of pointer

2025-10-26 13:57:49 +01:00

xvmc.c

Treewide: Fix typos

2026-03-16 13:11:07 +01:00