Stephen Smalley wrote:
> On Thu, 2008-06-19 at 11:42 -0400, Joshua Brindle wrote:
>   
>> This was written by Karl but he is currently unable to send patches
>>     
>
> Also need to fix it to extract the right type (the new type from the
> transition, not the tcontext type) from the error message.
> Use audit2allow -r < avc with the attached avc to test.
>
> Correct output is:
> require {
> 	type updpwd_t;
> 	role unconfined_r;
> }
>
> role unconfined_r types updpwd_t;
>
>   
Updated patch attached.

Karl