> >>Might need to change xorg.conf to etc_runtime_t? How about we change the type of xorg.conf to x_conf_t, allow X to read that, allow whatever program generates it to write it, contain /usr/sbin/nvidia-config-display in a separate domain, and allow that to write to xorg too... -- Ivan Gyurdiev <ivg2@xxxxxxxxxxx> Cornell University