aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPierre Ossman <ossman@cendio.se>2020-08-17 16:07:03 +0200
committerPierre Ossman <ossman@cendio.se>2020-08-17 16:07:03 +0200
commit82fbecb8a23bfdd3358516b1e6c98fe1df613791 (patch)
tree4ae360b81a733a346045519a89bc288925e52d79
parentbe97740479ee367a0794076e95ad4b159bc3c831 (diff)
downloadtigervnc-82fbecb8a23bfdd3358516b1e6c98fe1df613791.tar.gz
tigervnc-82fbecb8a23bfdd3358516b1e6c98fe1df613791.zip
Comment on SELinux rule affect other commands
This line affects every command run by the user, unlike everything else in our policy which is just for vncserver/vncsession. It's easy to miss this so add a comment pointing it out.
-rw-r--r--unix/vncserver/selinux/vncsession.te1
1 files changed, 1 insertions, 0 deletions
diff --git a/unix/vncserver/selinux/vncsession.te b/unix/vncserver/selinux/vncsession.te
index 5918e5a1..a773fed3 100644
--- a/unix/vncserver/selinux/vncsession.te
+++ b/unix/vncserver/selinux/vncsession.te
@@ -53,6 +53,7 @@ manage_lnk_files_pattern(vnc_session_t, xdm_home_t, xdm_home_t)
userdom_user_home_dir_filetrans(vnc_session_t, xdm_home_t, dir, ".vnc")
userdom_admin_home_dir_filetrans(vnc_session_t, xdm_home_t, dir, ".vnc")
+# This also affects other tools, e.g. vncpasswd
userdom_admin_home_dir_filetrans(userdomain, xdm_home_t, dir, ".vnc")
userdom_user_home_dir_filetrans(userdomain, xdm_home_t, dir, ".vnc")