diff --git a/Changelog b/Changelog
index b453974df..88188c388 100644
--- a/Changelog
+++ b/Changelog
@@ -1,3 +1,4 @@
+- Several fixes from the CLIP project.
 - Add support for labeled Booleans.
 - Remove node definitions and change node usage to generic nodes.
 - Add kernel_service access vectors, from Stephen Smalley.
diff --git a/policy/modules/admin/su.if b/policy/modules/admin/su.if
index 36f2316a9..4be14a3c0 100644
--- a/policy/modules/admin/su.if
+++ b/policy/modules/admin/su.if
@@ -90,6 +90,15 @@ template(`su_restricted_domain_template', `
 
 	miscfiles_read_localization($1_su_t)
 
+	ifdef(`distro_redhat',`
+		# RHEL5 and possibly newer releases incl. Fedora
+		auth_domtrans_upd_passwd($1_su_t)
+
+		optional_policy(`
+			locallogin_search_keys($1_su_t)
+		')
+	')
+
 	ifdef(`distro_rhel4',`
 		domain_role_change_exemption($1_su_t)
 		domain_subj_id_change_exemption($1_su_t)
@@ -218,6 +227,15 @@ template(`su_role_template',`
 	userdom_use_user_terminals($1_su_t)
 	userdom_search_user_home_dirs($1_su_t)
 
+	ifdef(`distro_redhat',`
+		# RHEL5 and possibly newer releases incl. Fedora
+		auth_domtrans_upd_passwd($1_su_t)
+
+		optional_policy(`
+			locallogin_search_keys($1_su_t)
+		')
+	')
+
 	ifdef(`distro_rhel4',`
 		domain_role_change_exemption($1_su_t)
 		domain_subj_id_change_exemption($1_su_t)
diff --git a/policy/modules/admin/su.te b/policy/modules/admin/su.te
index 3db3a9e7c..ab532d3fb 100644
--- a/policy/modules/admin/su.te
+++ b/policy/modules/admin/su.te
@@ -1,5 +1,5 @@
 
-policy_module(su, 1.9.0)
+policy_module(su, 1.9.1)
 
 ########################################
 #