http://people.fedoraproject.org/~dwalsh/SELinux/F11/global_tunables.patch
Removed mail_read_content, no domains use it.
Add allow_console_login interface used by login programs on ibmZseries
machines.
Added allow_unconfined_mmap_low boolean to turn on and off the ability
for all unocnfined domains to mmap_low memory in the kernel.