diff --exclude-from=exclude -N -u -r nsalibselinux/include/selinux/avc.h libselinux-2.0.7/include/selinux/avc.h --- nsalibselinux/include/selinux/avc.h 2007-02-20 08:43:13.000000000 -0500 +++ libselinux-2.0.7/include/selinux/avc.h 2007-03-22 16:48:42.000000000 -0400 @@ -6,6 +6,7 @@ #ifndef _SELINUX_AVC_H_ #define _SELINUX_AVC_H_ +#include #include #include #include diff --exclude-from=exclude -N -u -r nsalibselinux/utils/getsebool.c libselinux-2.0.7/utils/getsebool.c --- nsalibselinux/utils/getsebool.c 2006-11-16 17:15:17.000000000 -0500 +++ libselinux-2.0.7/utils/getsebool.c 2007-03-22 16:48:06.000000000 -0400 @@ -72,17 +72,23 @@ for (i = 0; i < len; i++) { active = security_get_boolean_active(names[i]); if (active < 0) { - fprintf(stderr, "Error getting active value for %s\n", - names[i]); - rc = -1; - goto out; + if (errno != EACCES) { + fprintf(stderr, "Error getting active value for %s\n", + names[i]); + rc = -1; + goto out; + } + continue; } pending = security_get_boolean_pending(names[i]); if (pending < 0) { - fprintf(stderr, "Error getting pending value for %s\n", - names[i]); - rc = -1; - goto out; + if (errno != EACCES) { + fprintf(stderr, "Error getting pending value for %s\n", + names[i]); + rc = -1; + goto out; + } + continue; } if (pending != active) { printf("%s --> %s pending: %s\n", names[i],