this is after todays update:
allow hald_t automount_tmp_t:dir getattr;
allow hald_t boot_t:dir getattr;
allow hald_t home_root_t:dir search;
allow hald_t initctl_t:fifo_file write;
allow hald_t initrc_var_run_t:file lock;
allow hald_t mnt_t:dir read;
allow hald_t mnt_t:file write;
allow hald_t sysctl_fs_t:dir search;
allow hald_t usr_t:file execute;
allow hald_t var_lib_nfs_t:dir search;
...and again if selinux==enforced then no g-p-m
Rog