From Debian package 0.0.20080702-1 dmesg bit is in russell-20080929.diff Make some uses of sysadm interfaces optional Other bits rendered unnecessary by UBAC Index: policy/modules/system/init.te =================================================================== --- policy/modules/system/init.te.orig +++ policy/modules/system/init.te @@ -183,6 +183,7 @@ fs_tmpfs_filetrans(init_t, initctl_t, fifo_file) ') +optional_policy(` tunable_policy(`init_upstart',` corecmd_shell_domtrans(init_t, initrc_t) ',` @@ -190,6 +191,7 @@ # causes problems with upstart sysadm_shell_domtrans(init_t) ') +') optional_policy(` auth_rw_login_records(init_t)