]> source.dussan.org Git - tigervnc.git/commit
[SELinux] Allow vnc_session_t type execute itself 1012/head
authorLukas Vrabec <lvrabec@redhat.com>
Wed, 6 May 2020 08:55:29 +0000 (10:55 +0200)
committerLukas Vrabec <lvrabec@redhat.com>
Wed, 6 May 2020 08:55:29 +0000 (10:55 +0200)
commit7b691ef81e49d49f7c02b1c4c5b745c8f2e805a7
tree51ad90d1ea36051226db1f2e3880ef744a30f861
parentf59e9649b06ce7cfa33ed217c9309cfa02b4853e
[SELinux] Allow vnc_session_t type execute itself

vncsession-start is running in SELinux vnc_session_t domain because of
"SELinuxContext=system_u:system_r:vnc_session_t:s0" option in systemd
vncserver@.service unit file. vncsession-start executing binary
vncsession with SELinux label/type vnc_session_t. This access was not
allowed in vncsession policy.
unix/vncserver/selinux/vncsession.te