Why is the following rule removed by the patch of the SRPM package selinux-policy-2.4.6-203.el5? # temporary hack until labeling on packets is supported allow $1 unlabeled_t:packet { send recv }; The actual file is kernel/kernel.if and line 2170. The comment above indicates that this is a temporary hack but I get some AVCs and need to manually allow this rule. Couldn't we accept the temporary hack until something more useful is out? Because I (and guess some others too) need this rule. cheers Stefan