>> >> Would this new syntax make more sense to you? > > Yes i suppose it would as i actually wanted to try that (eventually i > did not bother to try it though since i just trusted the cil reference > guide which made no mention of it. Please be aware that the CIL Reference Guide is first draft and there are some errors in it. These are the known ones: 1) The 2nd defaultuser title should be 'defaulttype'. 2) Optionals do support the filename typetransition statement. 3) Need to rewrite the classmap/classmapping sections and state format will be changing. 4) Anonymous classpermissionsets now allow expressions. 5) classmap can now be used in defaultuser etc. statements as mentioned in previous email (although just reported a small problem). If anyone finds errors or the examples need expanding then please let me know as I plan to keep it updated as the compiler progresses Richard _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.