Index: refpolicy-2.20260801/policy/modules/apps/wm.if
===================================================================
--- refpolicy-2.20260801.orig/policy/modules/apps/wm.if
+++ refpolicy-2.20260801/policy/modules/apps/wm.if
@@ -134,6 +134,10 @@ template(`wm_role_template',`
 	')
 
 	optional_policy(`
+		wayland_compositor_domain($1_wm_t)
+	')
+
+	optional_policy(`
 		xscreensaver_run($1_wm_t, $4)
 	')
 ')
@@ -205,7 +209,7 @@ interface(`wm_dontaudit_exec_tmp_files',
 
 ########################################
 ## <summary>
-##	mmap and read-write files in temporary filesystems.
+##	mmap and read-write files created by wm_domain in tmpfs filesystems.
 ## </summary>
 ## <param name="domain">
 ##	<summary>
@@ -243,6 +247,60 @@ interface(`wm_dontaudit_exec_tmpfs_files
 
 ########################################
 ## <summary>
+##	Allow receiving fd from wm domain
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain to allow
+##	</summary>
+## </param>
+#
+interface(`wm_receive_fd',`
+	gen_require(`
+		attribute wm_domain;
+	')
+
+	allow $1 wm_domain:fd use;
+')
+
+########################################
+## <summary>
+##	Allow sending fd to wm domain
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain to allow
+##	</summary>
+## </param>
+#
+interface(`wm_send_fd',`
+	gen_require(`
+		attribute wm_domain;
+	')
+
+	allow wm_domain $1:fd use;
+')
+
+########################################
+## <summary>
+##      Allow using socket of wm domain
+## </summary>
+## <param name="domain">
+##      <summary>
+##      Domain to allow
+##      </summary>
+## </param>
+#
+interface(`wm_sock_rw',`
+	gen_require(`
+		attribute wm_domain;
+	')
+
+	allow $1 wm_domain:unix_stream_socket rw_stream_socket_perms;
+')
+
+########################################
+## <summary>
 ##	Create a domain for applications
 ##	that are launched by the window
 ##	manager.
@@ -279,10 +337,55 @@ interface(`wm_dontaudit_exec_tmpfs_files
 interface(`wm_application_domain',`
 	gen_require(`
 		attribute wm_domain;
+		type wm_tmpfs_t;
 	')
 
 	userdom_user_application_domain($1, $2)
 	domtrans_pattern(wm_domain, $2, $1)
+	allow $1 wm_domain:unix_stream_socket { connectto rw_stream_socket_perms };
+	allow $1 wm_tmpfs_t:file mmap_rw_file_perms;
+	allow wm_domain $1:fd use;
+	optional_policy(`
+		wayland_client_domain($1)
+	')
+')
+
+########################################
+## <summary>
+##	Allow sending dbus message to wm domain
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain to allow
+##	</summary>
+## </param>
+#
+interface(`wm_send_dbus',`
+	gen_require(`
+		attribute wm_domain;
+		class dbus send_msg;
+	')
+
+	allow $1 wm_domain:dbus send_msg;
+')
+
+########################################
+## <summary>
+##	Allow receiving dbus message from wm domain
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain to allow
+##	</summary>
+## </param>
+#
+interface(`wm_recv_dbus',`
+	gen_require(`
+		attribute wm_domain;
+		class dbus send_msg;
+	')
+
+	allow wm_domain $1:dbus send_msg;
 ')
 
 ########################################
Index: refpolicy-2.20260801/policy/modules/apps/xscreensaver.te
===================================================================
--- refpolicy-2.20260801.orig/policy/modules/apps/xscreensaver.te
+++ refpolicy-2.20260801/policy/modules/apps/xscreensaver.te
@@ -87,6 +87,12 @@ tunable_policy(`xscreensaver_read_generi
 	userdom_dontaudit_read_user_tmp_files(xscreensaver_t)
 ')
 
+optional_policy(`
+	wm_application_domain(xscreensaver_t, xscreensaver_exec_t)
+	wm_send_dbus(xscreensaver_t)
+	wm_recv_dbus(xscreensaver_t)
+')
+
 ########################################
 #
 # Helper local policy
Index: refpolicy-2.20260801/policy/modules/apps/chromium.te
===================================================================
--- refpolicy-2.20260801.orig/policy/modules/apps/chromium.te
+++ refpolicy-2.20260801/policy/modules/apps/chromium.te
@@ -328,7 +328,7 @@ optional_policy(`
 ')
 
 optional_policy(`
-	wm_mmap_rw_tmpfs_files(chromium_t)
+	wm_application_domain(chromium_t, chromium_exec_t)
 ')
 
 #########################################
Index: refpolicy-2.20260801/policy/modules/services/colord.te
===================================================================
--- refpolicy-2.20260801.orig/policy/modules/services/colord.te
+++ refpolicy-2.20260801/policy/modules/services/colord.te
@@ -167,6 +167,10 @@ optional_policy(`
 ')
 
 optional_policy(`
+	wm_receive_fd(colord_t)
+')
+
+optional_policy(`
 	xdg_read_data_files(colord_t)
 ')
 
Index: refpolicy-2.20260801/policy/modules/services/dbus.te
===================================================================
--- refpolicy-2.20260801.orig/policy/modules/services/dbus.te
+++ refpolicy-2.20260801/policy/modules/services/dbus.te
@@ -96,6 +96,10 @@ optional_policy(`
 	systemd_use_logind_fds(system_dbusd_t)
 ')
 
+optional_policy(`
+	wm_receive_fd(system_dbusd_t)
+')
+
 ########################################
 #
 # Local policy
Index: refpolicy-2.20260801/policy/modules/services/dbus.if
===================================================================
--- refpolicy-2.20260801.orig/policy/modules/services/dbus.if
+++ refpolicy-2.20260801/policy/modules/services/dbus.if
@@ -149,6 +149,11 @@ template(`dbus_role_template',`
 	')
 
 	optional_policy(`
+		wm_receive_fd($1_dbusd_t)
+		wm_sock_rw($1_dbusd_t)
+	')
+
+	optional_policy(`
 		xdg_read_data_files($1_dbusd_t)
 	')
 
Index: refpolicy-2.20260801/policy/modules/apps/evolution.te
===================================================================
--- refpolicy-2.20260801.orig/policy/modules/apps/evolution.te
+++ refpolicy-2.20260801/policy/modules/apps/evolution.te
@@ -346,6 +346,11 @@ optional_policy(`
 	gnome_stream_connect_gconf(evolution_alarm_t)
 ')
 
+optional_policy(`
+	wm_mmap_rw_tmpfs_files(evolution_alarm_t)
+	wm_send_fd(evolution_alarm_t)
+')
+
 ########################################
 #
 # Exchange local policy
Index: refpolicy-2.20260801/policy/modules/apps/wm.fc
===================================================================
--- refpolicy-2.20260801.orig/policy/modules/apps/wm.fc
+++ refpolicy-2.20260801/policy/modules/apps/wm.fc
@@ -5,4 +5,5 @@
 /usr/bin/metacity	--	gen_context(system_u:object_r:wm_exec_t,s0)
 /usr/bin/mutter		--	gen_context(system_u:object_r:wm_exec_t,s0)
 /usr/bin/phoc		--	gen_context(system_u:object_r:wm_exec_t,s0)
+/usr/bin/Xwayland	--	gen_context(system_u:object_r:wm_exec_t,s0)
 /usr/bin/twm	--	gen_context(system_u:object_r:wm_exec_t,s0)
Index: refpolicy-2.20260801/policy/modules/session/wayland.te
===================================================================
--- refpolicy-2.20260801.orig/policy/modules/session/wayland.te
+++ refpolicy-2.20260801/policy/modules/session/wayland.te
@@ -35,8 +35,15 @@ attribute wayland_client_tmpfs_type;
 
 allow wayland_client wayland_compositor_tmpfs_type:file mmap_rw_inherited_file_perms;
 
+# for paste without wayland errors that cause most wayland clients to crash
+allow wayland_client wayland_client:fd use;
+allow wayland_client wayland_client:fifo_file write_inherited_fifo_file_perms;
+
+wayland_stream_connect(wayland_client)
+
 allow wayland_compositor wayland_client_tmpfs_type:file mmap_rw_inherited_file_perms;
 allow wayland_compositor wayland_client:fd use;
+allow wayland_compositor wayland_client:fifo_file write_inherited_fifo_file_perms;
 allow wayland_compositor wayland_client_sandboxed:fd use;
 
 allow wayland_compositor wayland_runtime_t:file manage_file_perms;
Index: refpolicy-2.20260801/policy/modules/system/userdomain.if
===================================================================
--- refpolicy-2.20260801.orig/policy/modules/system/userdomain.if
+++ refpolicy-2.20260801/policy/modules/system/userdomain.if
@@ -169,6 +169,10 @@ template(`userdom_base_user_template',`
 	optional_policy(`
 		kerneloops_dbus_chat($1_t)
 	')
+
+	optional_policy(`
+		wayland_client_domain($1_t)
+	')
 ')
 
 #######################################
