I like to rephrase my question slightly: My problem is very similar to this one: Author: Davide Bolcioni Date: 27 Apr 2005 Subject: "Is there a SELinux tutorial for ISVs ?" http://www.redhat.com/archives/fedora-selinux-list/2005-April/msg00244.html If I understand this thread correctly, it is not possible to ship binary policies in CentOS/RHEL 4. Reading the SELinux guide [1], I think it is possible to ship a complete policy but not a single/minor tweak to an existing policy. Correct? fs [1] "8.4. Deploying Customized Binary Policy", http://www.redhat.com/docs/manuals/enterprise/RHEL-4-Manual/selinux-guide/selg-section-0107.html