diff --git a/apps/cistech-tunnel/shared/entrypoint.sh b/apps/cistech-tunnel/shared/entrypoint.sh
index 2196712..d119321 100644
--- a/apps/cistech-tunnel/shared/entrypoint.sh
+++ b/apps/cistech-tunnel/shared/entrypoint.sh
@@ -78,4 +78,5 @@ echo "[entrypoint] openconnect-sso config generated"
 
 # Start VNC server
 chmod +x /shared/*
+chmod +x /root/.vnc/xstartup
 exec /shared/startup-vnc.sh