Fedora 10 Citrix Client SELinux Printing

[esb4me]

Has anyone managed to print from the Citrix client with SELinux on? It's working with SELinux permissive (never had it working at all with a previous Fedora) but I get SELinux denials when set to enforcing.

I've tried generating a local policy using a local.te as below and the instructions at http://docs.fedoraproject.org/selinux-faq-fc5/:

==========file://local.te====================================

module local 1.0;

require {
type lib_t;
type lpr_exec_t;
type nsplugin_t;
type pcscd_var_run_t;
class file getattr;
class file execute_no_trans;
class file { read execute };
}

#============= nsplugin_t ==============
allow nsplugin_t lpr_exec_t:file getattr;
allow nsplugin_t pcscd_var_run_t:file getattr;
allow nsplugin_t lib_t:file execute_no_trans;
allow nsplugin_t lpr_exec_t:file { read execute };

=======end of file===========================================