diff --git a/.cvsignore b/.cvsignore
index 6714cfce..0c4527ec 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -152,3 +152,4 @@ serefpolicy-3.5.7.tgz
 serefpolicy-3.5.8.tgz
 serefpolicy-3.5.9.tgz
 serefpolicy-3.5.10.tgz
+serefpolicy-3.5.11.tgz
diff --git a/policy-20080710.patch b/policy-20080710.patch
index b532592f..3a762fd0 100644
--- a/policy-20080710.patch
+++ b/policy-20080710.patch
@@ -1847,6 +1847,17 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol
 +	xserver_exec_pid(vbetool_t)
 +	xserver_write_pid(vbetool_t)
 +')
+diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/vpn.fc serefpolicy-3.5.11/policy/modules/admin/vpn.fc
+--- nsaserefpolicy/policy/modules/admin/vpn.fc	2008-08-07 11:15:13.000000000 -0400
++++ serefpolicy-3.5.11/policy/modules/admin/vpn.fc	2008-10-09 06:47:42.000000000 -0400
+@@ -6,6 +6,7 @@
+ #
+ # /usr
+ #
++/usr/bin/openconnect	--	gen_context(system_u:object_r:vpnc_exec_t,s0)
+ /usr/sbin/vpnc		--	gen_context(system_u:object_r:vpnc_exec_t,s0)
+ 
+ /var/run/vpnc(/.*)?		gen_context(system_u:object_r:vpnc_var_run_t,s0)
 diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/admin/vpn.te serefpolicy-3.5.11/policy/modules/admin/vpn.te
 --- nsaserefpolicy/policy/modules/admin/vpn.te	2008-10-08 19:00:27.000000000 -0400
 +++ serefpolicy-3.5.11/policy/modules/admin/vpn.te	2008-10-08 20:36:17.000000000 -0400
diff --git a/sources b/sources
index fd4e73cb..c0b66a65 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-97fd6422a72ab496aedcde042c49bc2e  serefpolicy-3.5.10.tgz
+e0bb33bf217f7adb81ce3b2d60c7a6a6  serefpolicy-3.5.11.tgz