3eaa993
# Add programs here which should not be confined by SELinux
3eaa993
# e.g.:
3eaa993
# /usr/local/bin/appsrv		--	gen_context(system_u:object_r:unconfined_exec_t,s0)
3eaa993
# For the time being until someone writes a sane policy, we need initrc to transition to unconfined_t
3eaa993
/usr/bin/vncserver		--	gen_context(system_u:object_r:unconfined_exec_t,s0)
3eaa993
3eaa993
/usr/sbin/xrdp   --  gen_context(system_u:object_r:unconfined_exec_t,s0)
3eaa993
/usr/sbin/xrdp-sesman   --  gen_context(system_u:object_r:unconfined_exec_t,s0)