diff --git a/krb5-1.10-selinux-label.patch b/krb5-1.10-selinux-label.patch
index 6355a05..7ff50a5 100644
--- a/krb5-1.10-selinux-label.patch
+++ b/krb5-1.10-selinux-label.patch
@@ -465,9 +465,9 @@ which we used earlier, is some improvement.
  
 --- krb5/src/util/support/selinux.c
 +++ krb5/src/util/support/selinux.c
-@@ -0,0 +1,372 @@
+@@ -0,0 +1,373 @@
 +/*
-+ * Copyright 2007,2008,2009,2011 Red Hat, Inc.  All Rights Reserved.
++ * Copyright 2007,2008,2009,2011,2012 Red Hat, Inc.  All Rights Reserved.
 + *
 + * Redistribution and use in source and binary forms, with or without
 + * modification, are permitted provided that the following conditions are met:
@@ -718,7 +718,8 @@ which we used earlier, is some improvement.
 +	int errno_save;
 +	security_context_t ctx;
 +
-+	if (strcmp(mode, "r") == 0) {
++	if ((strcmp(mode, "r") == 0) ||
++	    (strcmp(mode, "rb") == 0)) {
 +		return fopen(path, mode);
 +	}
 +
diff --git a/krb5.spec b/krb5.spec
index a230e67..38fe76d 100644
--- a/krb5.spec
+++ b/krb5.spec
@@ -745,6 +745,10 @@ exit 0
 %{_sbindir}/uuserver
 
 %changelog
+* Mon May  7 2012 Nalin Dahyabhai <nalin@redhat.com>
+- skip the setfscreatecon() if fopen() is passed "rb" as the open mode (part
+  of #819115)
+
 * Tue May  1 2012 Nalin Dahyabhai <nalin@redhat.com> 1.10.1-3
 - have -server require /usr/share/dict/words, which we set as the default
   dict_file in kdc.conf (#817089)