> Actually, I'm not 100% sure on this but I think it is much easier to > craft SELinux rules if we have separate processes. Well if a separate hald-runner process helps SELinux, I have no objections to this approach. BTW, is any distro regression-testing HAL with SELinux on a regular basis? -Artem.