For example this: (permissionx alg_socket_ioctl_except_SIOCGIFHWADDR (ioctl alg_socket (and (all) (not (0x8927))))) (classmap all_sockets (ioctl_except_SIOCGIFHWADDR)) (classmapping all_sockets ioctl_except_SIOCGIFHWADDR alg_socket_ioctl_except_SIOCGIFHWADDR) (allowx a self (all_sockets (ioctl_except_SIOCGIFHWADDR))) Say's: <snip> Building AST from Parse Tree Destroying Parse Tree Resolving AST Failed to resolve classmapping statement at policy/base/class_maps.cil:994 Problem at policy/base/class_maps.cil:994 Pass 14 of resolution failed Failed to resolve ast Failed to compile cildb: -2 make: *** [Makefile:30: policy.32] Error 254 Am i doing something wrong or is this unsupported? -- Key fingerprint = 5F4D 3CDB D3F8 3652 FBD8 02D5 3B6C 5F1D 2C7B 6B02 https://sks-keyservers.net/pks/lookup?op=get&search=0x3B6C5F1D2C7B6B02 Dominick Grift