My definition of the application domain, is any file that a normal user is expected to execute. It can either have a transition or not. If I define application_domain then it will transition. If I just define application_executable_file, then logged in users can execute it without a transition. Daemons for the most part should NOT be application_domains. This way we can dontaudit getattr of daemons that users would/should not be allowed to execute. Some applictions can be in both domains. For example cvs, rsync can be run without transitioning by users but when run from an initscript they transition. This patch makes changes to the pool to match this. I included the entire readahead patch in this patch as this should