Okay, with all the updates so far, I've been able to pare my custom policy way, way down to the following:
Code:
policy_module(vmware-server,1.0.0)
########################################
#
# Declarations
#
require {
type xdm_xserver_t;
type vmware_host_t;
class shm { unix_read read getattr associate };
}
#============= xdm_xserver_t ==============
allow xdm_xserver_t vmware_host_t:shm { unix_read read getattr associate };
Any updates coming which might clean these up, too?
-Rick