Context for Xvnc?

[Ian Pilcher]

On 01/03/2013 04:39 AM, Dominick Grift wrote:
> I am not quite sure but it would be interesting to see what happens in
> you label xvnc executab;e file type unconfined_exec_t

It would run as unconfined_t:

  type_transition initrc_t unconfined_exec_t : process unconfined_t;

I expect that this would also allow KDM to connect to Xvnc, but it would
be less secure.  Is there a reason that you think this is a better
option than xserver_exec_t?

-- 
========================================================================
Ian Pilcher                                         arequipeno at gmail.com
Sometimes there's nothing left to do but crash and burn...or die trying.
========================================================================