diff --git a/README.Fedora b/README.Fedora index 2c68fc5..f7d2610 100644 --- a/README.Fedora +++ b/README.Fedora @@ -31,10 +31,11 @@ allowed_users = anybody SELinux ======= -Please note that you may need to add an SELinux policy module in order to run -xrdp successfully under Fedora with SELinux enabled. One way to do this is to -put SELinux into permissive mode and build the policy from the denials you see -in the audit logs. +Please note that you may need to install xrdp-selinux package in order to get +the required SELinux policy that will allow xrdp and associated processes to +run successfully if SELinux is enabled. -We are working on making this part of the default installation, but it is not -quite there yet as of this writing. +WARNING: The policy module contains a rule that permits unconfined_service_t +processes to transition into unconfined_t. If xrdp is not the only service +that runs as unconfined_service_t on your system, this policy will allow any +other such service to transition as well. diff --git a/xrdp.spec b/xrdp.spec index 8bbffde..cd72e78 100644 --- a/xrdp.spec +++ b/xrdp.spec @@ -7,7 +7,7 @@ Summary: Open source remote desktop protocol (RDP) server Name: xrdp Epoch: 1 Version: 0.9.2 -Release: 8%{?dist} +Release: 9%{?dist} License: ASL 2.0 Group: Applications/Internet URL: http://www.xrdp.org/ @@ -239,6 +239,9 @@ chmod 400 %{_sysconfdir}/xrdp/key.pem %{_datadir}/selinux/*/%{name}.pp %changelog +* Thu Apr 13 2017 Bojan Smojver - 1:0.9.2-9 +- Adjust Fedora README file for SELinux changes + * Wed Apr 12 2017 Bojan Smojver - 1:0.9.2-8 - Add SELinux policy sub-package