On Wed, 2005-02-23 at 09:49 -0500, Colin Walters wrote: >>In any case, it appears that I should make the exception and allow the >>read. I made a huge mess when I started hacking the policy sources in >>FC2... is there a document or howto somewhere that describes the >>correct way to add a exception that will survive an rpm policy update? One other note - all my comments were relative to the rawhide targeted policy (which in the case of httpd AFAIK isn't very divergent from FC3). However I know the delta between FC2 and FC3 is larger, particularly due to the strict->targeted transition, and it's quite possible there are bugs there (such as the one you are encountering) which are fixed in FC3. Upgrading very strongly recommended :)