diff --git a/Changelog b/Changelog
index b0fc007b8..1699eb738 100644
--- a/Changelog
+++ b/Changelog
@@ -1,3 +1,4 @@
+- Xserver MLS fix from Eamon Walsh.
 - Add omapi port for dhcpcd.
 - Deprecate per-role templates and rolemap support.
 - Implement user-based access control for use as role separations.
diff --git a/policy/modules/services/xserver.te b/policy/modules/services/xserver.te
index 06e5ba9f8..aca7a66e1 100644
--- a/policy/modules/services/xserver.te
+++ b/policy/modules/services/xserver.te
@@ -743,7 +743,7 @@ ifdef(`distro_rhel4',`
 
 ifdef(`enable_mls',`
 	range_transition xserver_t xserver_tmp_t:sock_file s0 - mls_systemhigh;
-	range_transition xserver_t rootwindow_t:x_drawable s0 - mls_systemhigh;
+	range_transition xserver_t xserver_t:x_drawable s0 - mls_systemhigh;
 ')
 
 tunable_policy(`!xserver_object_manager',`