I am adding these man pages to the policy file to attempt to describe how users might manipulate policy. The goal was to describe Booleans and File Context that a user might want to manipulate. Please review the man pages. (IE translate them from dwalsh to English :^) ) I also attached the latest policy file that includes all changes including the previous patch I submitted. The main new stuff is around trying to get telnet, rlogin, and rshd to work. We pretty much figured out that SELinux is not going to offer much protection with targeted policy since these apps need to either transition directly to unconfined_t or to transition to login which will transition to unconfined_t. Looks like we will need to split up the apps via Priv-Separation in order to make this of much use. Dan