---
 index.md | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/index.md b/index.md
index c540c319e5ce..90dc2b73c31b 100644
--- a/index.md
+++ b/index.md
@@ -210,6 +210,16 @@ The default greetd configuration uses `agreety` (which looks just like `agetty`
 
 You can change the configuration as mentioned in the steps above to make `agreety` start another login environment of your choice (e.g. `sway`), or use a different greeter altogether.
 
+## greetd fails with `unable to exec: Sys(EACCES)`
+
+This is due to SELinux policies. You will need to run the following commands to
+unblock `greetd`:
+
+```sh
+semanage fcontext -a -ff -t xdm_exec_t /usr/bin/greetd
+restorecon /usr/bin/greetd
+```
+
 ## greetd fails with `unable to lock pages: Sys(ENOMEM)`
 
 greetd *must* be started as root, as it must perform a few privileged actions. This error is usually the result of attempting to run greetd as another user, which will fail immediately as `mlockall(3)` is attempted at startup (done to block greetd miniscule memory allocations from being swapped to disk). Later PAM operations also expect to be run by root/CAP_SYS_ADMIN as well.
-- 
2.30.2