Debian finally updated selinux to 3.7. At least libsepol. It broke my policy. This is the change I had to make to make it accept it: (typealias dpkg_script_t) -(typealiasactual dpkg_script_t sys.subj) +(in sys (typealiasactual dpkg_script_t subj)) Is this a bug? -- gpg --locate-keys dominick.grift@xxxxxxxxxxx (wkd) Key fingerprint = FCD2 3660 5D6B 9D27 7FC6 E0FF DA7E 521F 10F6 4098 Dominick Grift Mastodon: @kcinimod@xxxxxxxxxxx