This patch includes a simplification to the selinux policy because all the java subsystems can co-exist on the same tomcat instance. Hence, a new type pki_tomcat_t has been introduced. Aliases for old types have also been introduced. Scriptlets to add the selinux context (if needed) have also been added. This checkin will likely break f16 builds because the selinux patch no longer applies - and it likely calls on types that were only introduced in f17+. As dogtag 10 is targeted to f18, this is not something we should worry about. As of now, dogtag 10 must be run on f17+. A separate patch will clean up the spec file. _______________________________________________ Pki-devel mailing list Pki-devel(a)redhat.com https://www.redhat.com/mailman/listinfo/pki-devel