--- policy/modules/services/lpd.if	2006-09-25 15:11:36.000000000 -0400
+++ policy/modules/services/lpd.if-new	2006-09-29 18:41:22.000000000 -0400
@@ -65,31 +65,31 @@
 	allow $1_lpr_t self:netlink_route_socket r_netlink_socket_perms;
 	
 	# lpr can run in lightweight mode, without a local print spooler.
-	allow $1_lpr_t lpd_var_run_t:dir search;
-	allow $1_lpr_t lpd_var_run_t:sock_file write;
-	files_read_var_files($1_lpr_t)
+	#allow $1_lpr_t lpd_var_run_t:dir search;
+	#allow $1_lpr_t lpd_var_run_t:sock_file write;
+	#files_read_var_files($1_lpr_t)
 
 	# Connect to lpd via a Unix domain socket.
-	allow $1_lpr_t printer_t:sock_file rw_file_perms;
-	allow $1_lpr_t lpd_t:unix_stream_socket connectto;
+	#allow $1_lpr_t printer_t:sock_file rw_file_perms;
+	#allow $1_lpr_t lpd_t:unix_stream_socket connectto;
 	# Send SIGHUP to lpd.
-	allow $1_lpr_t lpd_t:process signal;
+	#allow $1_lpr_t lpd_t:process signal;
 
 	can_exec($1_lpr_t,lpr_exec_t)
 
-	allow $1_lpr_t $1_lpr_tmp_t:dir create_dir_perms;
-	allow $1_lpr_t $1_lpr_tmp_t:file create_file_perms;
-	files_tmp_filetrans($1_lpr_t, $1_lpr_tmp_t, { file dir })
-
-	allow $1_lpr_t $1_print_spool_t:file create_file_perms;
-	allow $1_lpr_t print_spool_t:dir rw_dir_perms;
-	type_transition $1_lpr_t print_spool_t:file $1_print_spool_t;
+	#allow $1_lpr_t $1_lpr_tmp_t:dir create_dir_perms;
+	#allow $1_lpr_t $1_lpr_tmp_t:file create_file_perms;
+	#files_tmp_filetrans($1_lpr_t, $1_lpr_tmp_t, { file dir })
+
+	#allow $1_lpr_t $1_print_spool_t:file create_file_perms;
+	#allow $1_lpr_t print_spool_t:dir rw_dir_perms;
+	#type_transition $1_lpr_t print_spool_t:file $1_print_spool_t;
 	# Read and write shared files in the spool directory.
-	allow $1_lpr_t print_spool_t:file rw_file_perms;
+	#allow $1_lpr_t print_spool_t:file rw_file_perms;
 
-	allow $1_lpr_t printconf_t:dir r_dir_perms;
-	allow $1_lpr_t printconf_t:file r_file_perms;
-	allow $1_lpr_t printconf_t:lnk_file { getattr read };
+	#allow $1_lpr_t printconf_t:dir r_dir_perms;
+	#allow $1_lpr_t printconf_t:file r_file_perms;
+	#allow $1_lpr_t printconf_t:lnk_file { getattr read };
 
 	dontaudit $1_lpr_t $2:unix_stream_socket { read write };