Adjust Fedora README file for SELinux changes.

This commit is contained in:
Bojan Smojver 2017-04-13 08:31:21 +10:00
parent 75d49d9d76
commit 294ba5281a
2 changed files with 11 additions and 7 deletions

View File

@ -31,10 +31,11 @@ allowed_users = anybody
SELinux SELinux
======= =======
Please note that you may need to add an SELinux policy module in order to run Please note that you may need to install xrdp-selinux package in order to get
xrdp successfully under Fedora with SELinux enabled. One way to do this is to the required SELinux policy that will allow xrdp and associated processes to
put SELinux into permissive mode and build the policy from the denials you see run successfully if SELinux is enabled.
in the audit logs.
We are working on making this part of the default installation, but it is not WARNING: The policy module contains a rule that permits unconfined_service_t
quite there yet as of this writing. processes to transition into unconfined_t. If xrdp is not the only service
that runs as unconfined_service_t on your system, this policy will allow any
other such service to transition as well.

View File

@ -7,7 +7,7 @@ Summary: Open source remote desktop protocol (RDP) server
Name: xrdp Name: xrdp
Epoch: 1 Epoch: 1
Version: 0.9.2 Version: 0.9.2
Release: 8%{?dist} Release: 9%{?dist}
License: ASL 2.0 License: ASL 2.0
Group: Applications/Internet Group: Applications/Internet
URL: http://www.xrdp.org/ URL: http://www.xrdp.org/
@ -239,6 +239,9 @@ chmod 400 %{_sysconfdir}/xrdp/key.pem
%{_datadir}/selinux/*/%{name}.pp %{_datadir}/selinux/*/%{name}.pp
%changelog %changelog
* Thu Apr 13 2017 Bojan Smojver <bojan@rexurive.com> - 1:0.9.2-9
- Adjust Fedora README file for SELinux changes
* Wed Apr 12 2017 Bojan Smojver <bojan@rexurive.com> - 1:0.9.2-8 * Wed Apr 12 2017 Bojan Smojver <bojan@rexurive.com> - 1:0.9.2-8
- Add SELinux policy sub-package - Add SELinux policy sub-package