http://people.fedoraproject.org/~dwalsh/SELinux/F11/apps_ada.patch Changed to call unconfined_domain directly. I am splitting out unconfineuser from unconfined_domain, as part of this I want to make sure all unconfined domains call the correct interface.