diff --git a/src/patches/selinux-homesocket.patch b/src/patches/selinux-homesocket.patch
index b44a2de533..818bfe810d 100644
--- a/src/patches/selinux-homesocket.patch
+++ b/src/patches/selinux-homesocket.patch
@@ -17,10 +17,11 @@ Index: selinux/cups_xpra/cups_xpra.te
  	type init_var_run_t;
  	type passwd_file_t;
  	type print_spool_t;
-@@ -41,3 +43,8 @@
- 
- allow cups_xpra_t user_tmp_t:sock_file write;
- 
+@@ -46,3 +48,9 @@
+ #to generate the default xpra config object,
+ #we may need to getattr the Xorg binary:
+ allow cups_xpra_t xserver_exec_t:file getattr;
++
 +#allow connection to the socket in ~/.xpra
 +allow cups_xpra_t user_home_t:dir search;
 +allow cups_xpra_t user_home_t:sock_file write;