In my Fedora 10 system, all fonts under /usr/share/fonts are of the fonts_t type, while the fontconfig files under /etc/fonts are of the default etc_t type. I think it would make sense to move the whole /etc/fonts directory under the fonts_t type, so that user can easily say "this domain can use fonts" and be done without allowing the domain to read the whole /etc directory and files.
What do you think about it? Does it make sense to modify the default Fedora policy according to these lines?
-Yenya