Remember if you need to build a tool that will run partially as root, we would like to write policy to confine it. A badly written Dbus activation service, can be just as dangerous as a badly written setuid application. We need to have SELinux confinement on the "root" portion of your application. Dan -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list