From 4169d9196d18d22110683c32aa888a86c9289c9b Mon Sep 17 00:00:00 2001
From: Wim Taymans <wtaymans@redhat.com>
Date: Wed, 15 Jan 2020 17:17:56 +0100
Subject: [PATCH] module-access: handle -EACCES as non-flatpak

If we can't access the root filesystem, grant access to the app.
This should not happen but for now it is a workaround for selinux
where we can't access the gnome-shell root when it connects for
screen sharing.
---
 src/modules/module-access.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/modules/module-access.c b/src/modules/module-access.c
index d388997c2..0cd9bf2f7 100644
--- a/src/modules/module-access.c
+++ b/src/modules/module-access.c
@@ -164,6 +164,8 @@ context_check_access(void *data, struct pw_impl_client *client)
 		if (res < 0) {
 			pw_log_warn("module %p: client %p sandbox check failed: %s",
 				impl, client, spa_strerror(res));
+			if (res == -EACCES)
+				goto granted;
 		}
 		else if (res > 0) {
 			pw_log_debug("module %p: sandboxed client %p added", impl, client);