On Mon, Sep 27, 2004 at 11:00:49AM -0400, Daniel J Walsh wrote: > /lib(64)?/tls/i.86/[^/]*\.so(\.[^/]*)* -- system_u:object_r:shlib_t > > is already in the latest policy. I think that we're inevitably going to need a similar addition for /usr/lib. There's also a reference to /lib/tls/i686/cmov in the policy, which brings up a question. The hwcap logic in the dynamic linker includes the ability to distinguish between many other specialized variations of libraries. So, how exhaustive is the policy intended to be? Nalin