Minor changes to the rdisc module, the interface that is added is used in later RH patches (not part of the current patchset)... Index: refpolicy/policy/modules/services/rdisc.if =================================================================== --- refpolicy.orig/policy/modules/services/rdisc.if 2008-07-19 19:15:41.000000000 +0200 +++ refpolicy/policy/modules/services/rdisc.if 2008-08-03 21:17:42.000000000 +0200 @@ -1 +1,20 @@ ## <summary>Network router discovery daemon</summary> + +######################################## +## <summary> +## Execute rdisc server in the rdisc domain. +## </summary> +## <param name="domain"> +## <summary> +## The type of the process performing this action. +## </summary> +## </param> +# +# +interface(`rdisc_script_domtrans',` + gen_require(` + type rdisc_script_exec_t; + ') + + init_script_domtrans_spec($1,rdisc_script_exec_t) +') Index: refpolicy/policy/modules/services/rdisc.te =================================================================== --- refpolicy.orig/policy/modules/services/rdisc.te 2008-08-03 16:47:00.000000000 +0200 +++ refpolicy/policy/modules/services/rdisc.te 2008-08-03 21:17:42.000000000 +0200 @@ -45,6 +45,8 @@ libs_use_ld_so(rdisc_t) libs_use_shared_libs(rdisc_t) +miscfiles_read_localization(rdisc_t) + logging_send_syslog_msg(rdisc_t) sysnet_read_config(rdisc_t) -- David Härdeman -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.