From 94068d3ebc486ad47cd6c04e57a51279e7c5f6ab Mon Sep 17 00:00:00 2001
From: Viktor Liu <viktor@netbird.io>
Date: Sun, 17 May 2026 06:32:50 +0200
Subject: [PATCH] Drop -ac from Xvfb/Xorg invocations to keep xhost localuser
 grant authoritative

---
 client/vnc/server/virtual_x11.go | 2 --
 1 file changed, 2 deletions(-)

diff --git a/client/vnc/server/virtual_x11.go b/client/vnc/server/virtual_x11.go
index cf12f1654..4575a0aab 100644
--- a/client/vnc/server/virtual_x11.go
+++ b/client/vnc/server/virtual_x11.go
@@ -249,7 +249,6 @@ func (vs *VirtualSession) startXvfbDirect() error {
 	geom := fmt.Sprintf("%dx%dx24", vs.width, vs.height)
 	vs.xvfb = exec.Command("Xvfb", vs.display,
 		"-screen", "0", geom,
-		"-ac",
 		"-nolisten", "tcp",
 	)
 	vs.xvfb.SysProcAttr = &syscall.SysProcAttr{Setsid: true, Pdeathsig: syscall.SIGTERM}
@@ -306,7 +305,6 @@ EndSection
 		"-config", confPath,
 		"-noreset",
 		"-nolisten", "tcp",
-		"-ac",
 	)
 	vs.xvfb.SysProcAttr = &syscall.SysProcAttr{Setsid: true, Pdeathsig: syscall.SIGTERM}