In policy version 3.3.1-42 a boolean browser_confine_unconfined exists to control firefox. Since version 3.3.1-51 it's gone and only one for guest exists. I checked the RPM changelog but nothing helpful. What happened to the other one? Does there also exist one for staff_t etc.? Best regards Stefan