metalefty/xrdp-next
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Adjust Fedora README file for SELinux changes.

Browse Source
This commit is contained in:
Bojan Smojver 2017-04-13 08:31:21 +10:00
parent 75d49d9d76
commit 294ba5281a
2 changed files with 11 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
README.Fedora
View File

@ -31,10 +31,11 @@ allowed_users = anybody
SELinux
=======
Please note that you may need to add an SELinux policy module in order to run
xrdp successfully under Fedora with SELinux enabled. One way to do this is to
put SELinux into permissive mode and build the policy from the denials you see
in the audit logs.
Please note that you may need to install xrdp-selinux package in order to get
the required SELinux policy that will allow xrdp and associated processes to
run successfully if SELinux is enabled.
We are working on making this part of the default installation, but it is not
quite there yet as of this writing.
WARNING: The policy module contains a rule that permits unconfined_service_t
processes to transition into unconfined_t. If xrdp is not the only service
that runs as unconfined_service_t on your system, this policy will allow any
other such service to transition as well.

5
xrdp.spec
View File

@ -7,7 +7,7 @@ Summary: Open source remote desktop protocol (RDP) server
Name: xrdp
Epoch: 1
Version: 0.9.2
Release: 8%{?dist}
Release: 9%{?dist}
License: ASL 2.0
Group: Applications/Internet
URL: http://www.xrdp.org/
@ -239,6 +239,9 @@ chmod 400 %{_sysconfdir}/xrdp/key.pem
%{_datadir}/selinux/*/%{name}.pp
%changelog
* Thu Apr 13 2017 Bojan Smojver <bojan@rexurive.com> - 1:0.9.2-9
- Adjust Fedora README file for SELinux changes
* Wed Apr 12 2017 Bojan Smojver <bojan@rexurive.com> - 1:0.9.2-8
- Add SELinux policy sub-package