On 01/03/2013 04:39 AM, Dominick Grift wrote: > I am not quite sure but it would be interesting to see what happens in > you label xvnc executab;e file type unconfined_exec_t It would run as unconfined_t: type_transition initrc_t unconfined_exec_t : process unconfined_t; I expect that this would also allow KDM to connect to Xvnc, but it would be less secure. Is there a reason that you think this is a better option than xserver_exec_t? -- ======================================================================== Ian Pilcher arequipeno@xxxxxxxxx Sometimes there's nothing left to do but crash and burn...or die trying. ======================================================================== -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux