rhgb (RedHat Graphical Boot) is RH specific so this should be uncontroversial... diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/rhgb.if serefpolicy-3.5.0/policy/modules/services/rhgb.if --- nsaserefpolicy/policy/modules/services/rhgb.if 2008-07-10 11:38:46.000000000 -0400 +++ serefpolicy-3.5.0/policy/modules/services/rhgb.if 2008-07-15 14:05:13.000000000 -0400 @@ -4,7 +4,7 @@ ## <summary> ## RHGB stub interface. No access allowed. ## </summary> -## <param name="domain" unused="true"> +## <param name="domain"> ## <summary> ## N/A ## </summary> diff --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/rhgb.te serefpolicy-3.5.0/policy/modules/services/rhgb.te --- nsaserefpolicy/policy/modules/services/rhgb.te 2008-07-10 11:38:46.000000000 -0400 +++ serefpolicy-3.5.0/policy/modules/services/rhgb.te 2008-07-15 14:05:13.000000000 -0400 @@ -92,6 +92,7 @@ term_getattr_pty_fs(rhgb_t) init_write_initctl(rhgb_t) +init_chat(rhgb_t) libs_use_ld_so(rhgb_t) libs_use_shared_libs(rhgb_t) -- David Härdeman -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.