diff --git a/policy-20090521.patch b/policy-20090521.patch
index 8dd99b0..397c731 100644
--- a/policy-20090521.patch
+++ b/policy-20090521.patch
@@ -1211,7 +1211,7 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol
/dev/lp.* -c gen_context(system_u:object_r:printer_device_t,s0)
diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/devices.if serefpolicy-3.6.12/policy/modules/kernel/devices.if
--- nsaserefpolicy/policy/modules/kernel/devices.if 2009-06-25 10:19:44.000000000 +0200
-+++ serefpolicy-3.6.12/policy/modules/kernel/devices.if 2009-06-25 10:21:01.000000000 +0200
++++ serefpolicy-3.6.12/policy/modules/kernel/devices.if 2009-07-03 11:25:38.000000000 +0200
@@ -1727,6 +1727,133 @@
########################################
@@ -1346,6 +1346,28 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol
## Read the lvm comtrol device.
##
##
+@@ -3780,3 +3907,21 @@
+
+ typeattribute $1 devices_unconfined_type;
+ ')
++
++######################################
++##
++## Set the attributes of the tty device
++##
++##
++##
++## Domain allowed access.
++##
++##
++#
++interface(`dev_setattr_tty',`
++ gen_require(`
++ type devtty_t;
++ ')
++
++ setattr_chr_files_pattern($1, devtty_t, devtty_t)
++')
diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/kernel/devices.te serefpolicy-3.6.12/policy/modules/kernel/devices.te
--- nsaserefpolicy/policy/modules/kernel/devices.te 2009-06-25 10:19:44.000000000 +0200
+++ serefpolicy-3.6.12/policy/modules/kernel/devices.te 2009-06-25 10:21:01.000000000 +0200
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 26ddfa8..fe380be 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -20,7 +20,7 @@
Summary: SELinux policy configuration
Name: selinux-policy
Version: 3.6.12
-Release: 62%{?dist}
+Release: 63%{?dist}
License: GPLv2+
Group: System Environment/Base
Source: serefpolicy-%{version}.tgz
@@ -475,6 +475,9 @@ exit 0
%endif
%changelog
+* Fri Jul 3 2009 Miroslav Grepl 3.6.12-63
+- Allow ftpd to create shm
+
* Mon Jun 29 2009 Miroslav Grepl 3.6.12-62
- Allow sshd to manage gitosis var/lib files