Ville has been trying to build a modular policy package for w3c. He created te,fc,if files similar to the ones I have attached. The problem is that when he compiles them he ends up with avc messages suggesting he needs these additional rules: allow httpd_t httpd_w3c_script_exec_t:file { execute execute_no_trans getattr ioctl read }; I have duplicated this on my machine. From my reading of the generated policy these should already exist. Examining the tmp/w3c.tmp file it looks like they are there (except for the execute_no_trans). They are wrapped in a boolean though. Is there something wrong in policy modules handling of booleans?