Description of problem:
$ systemctl status vncserver@:0.service
? vncserver@:0.service - Remote desktop service (VNC)
     Loaded: loaded (/etc/systemd/system/vncserver@:0.service; disabled; preset: disabled)
    Drop-In: /usr/lib/systemd/system/service.d
             ??10-timeout-abort.conf
     Active: active (running) since Mon 2026-06-01 08:19:32 PDT; 2min 33s ago
 Invocation: 26a17754ad644a35bda86dc63e5431ce
    Process: 2214 ExecStartPre=/usr/libexec/vncsession-restore :0 (code=exited, status=0/SUCCESS)
    Process: 2223 ExecStart=/usr/libexec/vncsession-start :0 (code=exited, status=0/SUCCESS)
   Main PID: 2231 (vncsession)
...

Connect with Remmina from another system.
SELinux is preventing sshd-session from 'name_connect' accesses on the tcp_socket port 5900.

*****  Plugin catchall (100. confidence) suggests   **************************

If you believe that sshd-session should be allowed name_connect access on the port 5900 tcp_socket by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'sshd-session' --raw | audit2allow -M my-sshdsession
# semodule -X 300 -i my-sshdsession.pp

Additional Information:
Source Context                system_u:system_r:sshd_session_t:s0-s0:c0.c1023
Target Context                system_u:object_r:vnc_port_t:s0
Target Objects                port 5900 [ tcp_socket ]
Source                        sshd-session
Source Path                   sshd-session
Port                          5900
Host                          (removed)
Source RPM Packages           
Target RPM Packages           
SELinux Policy RPM            selinux-policy-targeted-44.1-1.fc44.noarch
Local Policy RPM              selinux-policy-targeted-44.1-1.fc44.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 7.0.10-201.fc44.x86_64 #1 SMP
                              PREEMPT_DYNAMIC Wed May 27 13:57:41 UTC 2026
                              x86_64
Alert Count                   1
First Seen                    2026-06-01 08:20:02 PDT
Last Seen                     2026-06-01 08:20:02 PDT
Local ID                      6dd6b0b8-d914-4c4b-bf32-4226f6288089

Raw Audit Messages
type=AVC msg=audit(1780327202.332:356): avc:  denied  { name_connect } for  pid=3236 comm="sshd-session" dest=5900 scontext=system_u:system_r:sshd_session_t:s0-s0:c0.c1023 tcontext=system_u:object_r:vnc_port_t:s0 tclass=tcp_socket permissive=1


Hash: sshd-session,sshd_session_t,vnc_port_t,tcp_socket,name_connect

Version-Release number of selected component:
selinux-policy-targeted-44.1-1.fc44.noarch

Additional info:
reporter:       libreport-2.17.15
kernel:         7.0.10-201.fc44.x86_64
reason:         SELinux is preventing sshd-session from 'name_connect' accesses on the tcp_socket port 5900.
hashmarkername: setroubleshoot
package:        selinux-policy-targeted-44.1-1.fc44.noarch
component:      selinux-policy
type:           libreport
component:      selinux-policy