Re-adjust SELinux policy to use gnome config/data interfaces

TigerVNC · Apr 10, 2024 · c1b3db7 · c1b3db7
1 parent 2469d75
commit c1b3db7
Showing 1 changed file with 7 additions and 4 deletions.
diff --git a/unix/vncserver/selinux/vncsession.te b/unix/vncserver/selinux/vncsession.te
@@ -72,13 +72,16 @@ optional_policy(`
 	userdom_spec_domtrans_all_users(vnc_session_t)
 	userdom_signal_all_users(vnc_session_t)
 
-	userdom_user_home_dir_filetrans(vnc_session_t, vnc_home_t, dir)
-	userdom_admin_home_dir_filetrans(vnc_session_t, vnc_home_t, dir)
+	userdom_user_home_dir_filetrans(vnc_session_t, vnc_home_t, dir, ".vnc")
+	userdom_admin_home_dir_filetrans(vnc_session_t, vnc_home_t, dir, ".vnc")
 
 	# This also affects other tools, e.g. vncpasswd
 	gen_require(`
 		attribute userdomain;
 	')
-	userdom_admin_home_dir_filetrans(userdomain, vnc_home_t, dir)
-	userdom_user_home_dir_filetrans(userdomain, vnc_home_t, dir)
+	userdom_admin_home_dir_filetrans(userdomain, vnc_home_t, dir, ".vnc")
+	userdom_user_home_dir_filetrans(userdomain, vnc_home_t, dir, ".vnc")
+
+	gnome_config_filetrans(vnc_session_t, vnc_home_t, dir, "tigervnc")
+	gnome_data_filetrans(userdomain, vnc_home_t, dir, "tigervnc")
 ')