From: Zdenek Pytela Date: Mon, 7 Feb 2022 09:45:41 +0000 (+0100) Subject: SELinux: use /root/.vnc in file context specification X-Git-Tag: v1.12.90~50 X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=refs%2Fpull%2F1426%2Fhead;p=tigervnc.git SELinux: use /root/.vnc in file context specification Instead of HOME_ROOT/.vnc, /root/.vnc should be used for user root's home to specify default file context as HOME_ROOT actually means base for home dirs (usually /home). --- diff --git a/unix/vncserver/selinux/vncsession.fc b/unix/vncserver/selinux/vncsession.fc index 6aaf4b1f..bc81f8f2 100644 --- a/unix/vncserver/selinux/vncsession.fc +++ b/unix/vncserver/selinux/vncsession.fc @@ -18,7 +18,7 @@ # HOME_DIR/\.vnc(/.*)? gen_context(system_u:object_r:vnc_home_t,s0) -HOME_ROOT/\.vnc(/.*)? gen_context(system_u:object_r:vnc_home_t,s0) +/root/\.vnc(/.*)? gen_context(system_u:object_r:vnc_home_t,s0) /usr/sbin/vncsession -- gen_context(system_u:object_r:vnc_session_exec_t,s0) /usr/libexec/vncsession-start -- gen_context(system_u:object_r:vnc_session_exec_t,s0)