diff --git a/tigervnc.changes b/tigervnc.changes
index f056deb..0f03415 100644
--- a/tigervnc.changes
+++ b/tigervnc.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Fri Aug 11 08:59:54 UTC 2017 - msrb@suse.com
+
+- Disable MIT-SHM extension when running under vnc user.
+  (bnc#1053373)
+
 -------------------------------------------------------------------
 Thu Jul 20 07:49:41 UTC 2017 - msrb@suse.com
 
diff --git a/vnc.xinetd b/vnc.xinetd
index a42b1fd..1ab18c5 100644
--- a/vnc.xinetd
+++ b/vnc.xinetd
@@ -10,7 +10,7 @@ service vnc1
 	wait		= no
 	user		= vnc
 	server		= /usr/lib/vnc/with-vnc-key.sh
-	server_args	= /usr/bin/Xvnc -noreset -inetd -once -query localhost -geometry 1024x768 -securitytypes X509None,None -X509Key /etc/vnc/tls.key -X509Cert /etc/vnc/tls.cert -log *:syslog:30
+	server_args	= /usr/bin/Xvnc -noreset -inetd -once -query localhost -geometry 1024x768 -securitytypes X509None,None -X509Key /etc/vnc/tls.key -X509Cert /etc/vnc/tls.cert -log *:syslog:30 -extension MIT-SHM
 	disable		= yes
 }
 # default: off
@@ -25,7 +25,7 @@ service vnc2
 	wait		= no
 	user		= vnc
 	server		= /usr/lib/vnc/with-vnc-key.sh
-	server_args	= /usr/bin/Xvnc -noreset -inetd -once -query localhost -geometry 1280x1024 -securitytypes X509None,None -X509Key /etc/vnc/tls.key -X509Cert /etc/vnc/tls.cert -log *:syslog:30
+	server_args	= /usr/bin/Xvnc -noreset -inetd -once -query localhost -geometry 1280x1024 -securitytypes X509None,None -X509Key /etc/vnc/tls.key -X509Cert /etc/vnc/tls.cert -log *:syslog:30 -extension MIT-SHM
 	disable		= yes
 }
 # default: off
@@ -40,7 +40,7 @@ service vnc3
 	wait		= no
 	user		= vnc
 	server		= /usr/lib/vnc/with-vnc-key.sh
-	server_args	= /usr/bin/Xvnc -noreset -inetd -once -query localhost -geometry 1600x1200 -securitytypes X509None,None -X509Key /etc/vnc/tls.key -X509Cert /etc/vnc/tls.cert -log *:syslog:30
+	server_args	= /usr/bin/Xvnc -noreset -inetd -once -query localhost -geometry 1600x1200 -securitytypes X509None,None -X509Key /etc/vnc/tls.key -X509Cert /etc/vnc/tls.cert -log *:syslog:30 -extension MIT-SHM
 	disable		= yes
 }
 # default: off