diff --git a/gdm-password.pam b/gdm-password.pam
index 4eacbe9..eba96f5 100644
--- a/gdm-password.pam
+++ b/gdm-password.pam
@@ -1,3 +1,4 @@
+auth     [success=done ignore=ignore default=bad] pam_selinux_permit.so
 auth        substack      password-auth
 auth        required      pam_succeed_if.so user != root quiet
 auth        optional      pam_gnome_keyring.so
diff --git a/gdm.spec b/gdm.spec
index 2f112ea..7852030 100644
--- a/gdm.spec
+++ b/gdm.spec
@@ -16,7 +16,7 @@
 Summary: The GNOME Display Manager
 Name: gdm
 Version: 2.28.0
-Release: 4%{?dist}
+Release: 5%{?dist}
 Epoch: 1
 License: GPLv2+
 Group: User Interface/X
@@ -400,6 +400,9 @@ fi
 %{_libdir}/gdm/simple-greeter/plugins/fingerprint.so
 
 %changelog
+* Wed Oct 07 2009 Ray Strode <rstrode@redhat.com> - 1:2.28.0-5
+- Fix xguest
+
 * Mon Sep 28 2009 Ray Strode <rstrode@redhat.com> - 1:2.28.0-4
 - Add cache dir to package manifest