The current policies only support NFS over UDP. When mounting NFS locations with TCP, we notice that the kernel_t domain has no access to the NFS tcp_sockets. These simple patches add an rpc_tcp_rw_nfs_socket() interface and then call it from the kernel_t definition. Wkr, Sven Vermeulen