kerberos seems to have basic functionality. some denials occur but do not seem to effect what

was tested so far

/etc/init.d/krb5kdc start

	allow krb5kdc_t krb5_conf_t:file write;

	allow krb5kdc_t krb5kdc_conf_t:file write;

	allow krb5kdc_t proc_net_t:dir read;

/etc/init.d/kadmin start

	allow kadmind_t krb5_conf_t:file write;

	allow kadmind_t krb5kdc_conf_t:file write;