We have created a newversion of the su command called runuser, which will run a program as a different user. The command can only be run as root and will not use pam or prompt for passwords. Otherwize it works exactly as su. This change is needed by SELinux in order to support proper transitioning on process execution. Attached is a patch to the vncserver.init file to make the change.
Created attachment 104747 [details] Patch for changing su to runuser