diff --git a/xen.spec b/xen.spec
index 72705bf..76a4c38 100644
--- a/xen.spec
+++ b/xen.spec
@@ -5,7 +5,7 @@
 Summary: Xen is a virtual machine monitor
 Name:    xen
 Version: 3.0.1
-Release: 2
+Release: 3
 Group:   Development/Libraries
 License: GPL
 URL:     http://www.cl.cam.ac.uk/Research/SRG/netos/xen/index.html
@@ -22,6 +22,7 @@ Patch6: xen-network-iptables-bridge.patch
 Patch8: xen-vmxballoon-hack.patch
 Patch9: xen-3.0.1-config-allow-http.patch
 Patch10: xen-3.0.1-m64.patch
+Patch11: xen-3.0.1-cloexec.patch
 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
 BuildRequires: transfig libidn-devel zlib-devel texi2html SDL-devel curl-devel
 BuildRequires: libX11-devel python-devel ghostscript tetex-latex 
@@ -62,6 +63,7 @@ or makes fun of you in front of your friends.
 %patch8 -p1
 %patch9 -p1 
 %patch10 -p1 -b .m64
+%patch11 -p1 -b .cloexec
 
 cp %{SOURCE2} .
 
@@ -159,6 +161,10 @@ rm -rf $RPM_BUILD_ROOT
 %dir %{_localstatedir}/run/xenstored
 
 %changelog
+* Tue Mar  7 2006 Jeremy Katz <katzj@redhat.com> - 3.0.1-3
+- set /proc/xen/privcmd and /var/log/xend-debug.log as close on exec to avoid
+  SELinux problems
+
 * Mon Mar  6 2006 Stephen Tweedie <sct@redhat.com> - 3.0.1-2
 - Use kva mmap to find the xenstore page (upstream xen-unstable cset 9130)