Selinux disables X11 forwarding

Ask Fedora
1

With today’s release of selinux-policy-0:44.7-1 and selinux-policy-targeted-0:44.7-1, X11 forwarding was disabled (I’m using gnome and wayland).

I can’t find any discussion on this and would like to know what users of X11 forwarding can use instead. Is the only possibility gnome-remote-desktop?

Thanks

3

It might not be intentional.

See Bug 2523732 - sshd_session_t enforcement breaks OpenSSH direct-tcpip / ProxyJump forwarding to ssh_port_t or Bug 2523504 - Newest update to selinux breaks ssh [NEEDINFO]

4

Thanks, I’ve added a comment to the first issue.

5

What would be useful in the bug report is the output from

 journalctl -g 'AVC avc:' |grep ssh
6

Done.

7

This is fixed in selinux-policy-44.8-1.fc44 which is currently in testing.