Hello,
     I have attached a simple patch which introduces a "typeattribute" statement 
to the policy grammar.  This will allow attributes to be added to a type after 
its initial definition - much like the "typealias" statement allows for aliasing 
after the initial type definition.  The usage is as follows:

typeattribute TYPE ATTRIBUTES;

where TYPE is the type you are adding attributes to and ATTRIBUTES is a comma 
separated list of the attributes you would like to add.

Such statements are useful for policy tweaking without extensive modification to 
the existing .te files (which makes tracking changes much easier).

The patch is against the current sourceforge CVS chekpolicy directory.

-- 

Darrel