--- refpolicy-0.2.20100524.orig/policy/modules/kernel/files.fc
+++ refpolicy-0.2.20100524/policy/modules/kernel/files.fc
@@ -66,8 +66,6 @@
 
 /etc/ipsec\.d/examples(/.*)?	gen_context(system_u:object_r:etc_t,s0)
 
-/etc/network/ifstate	--	gen_context(system_u:object_r:etc_runtime_t,s0)
-
 /etc/ptal/ptal-printd-like -- 	gen_context(system_u:object_r:etc_runtime_t,s0)
 
 /etc/sysconfig/hwconf	--	gen_context(system_u:object_r:etc_runtime_t,s0)
@@ -252,5 +250,8 @@
 /var/tmp/vi\.recover	-d	gen_context(system_u:object_r:tmp_t,s0)
 
 ifdef(`distro_debian',`
-/var/run/motd		--	gen_context(system_u:object_r:etc_runtime_t,s0)
+/var/run/motd		--	gen_context(system_u:object_r:initrc_var_run_t,s0)
+# on Debian /lib/init/rw is a tmpfs used like /var/run but
+# before /var is mounted
+/lib/init/rw(/.*)?		gen_context(system_u:object_r:var_run_t,s0-mls_systemhigh)
 ')