> I have looked at the shibboleth policy in the selinux refpolicy That's long rotted, I doubt it has much relevance now. I am happy to commit any contributed policy files into the distribution as long as it's clear we have no involvement or ability to support them. -- Scott