http://people.fedoraproject.org/~dwalsh/SELinux/F11/services_hal.patch
Lots of new privs for hal
Many interfaces added for confined domains.
Added policy for dccm
hald needs to mount dos file systems (usb devices)
hal can start network
uses polkit
hald_mac sends syslog messages needs sys_admin