On Wed, 2004-03-10 at 10:16, Lamont R. Peterson wrote: > Since firstboot exists to perform one-time, first-time (though not > entirely necessary) things I think we should look at adding policy just > for firstboot. Then, the last thing that firstboot should do is to > remove the firstboot only policy into the appropriate "unused" > directory. The "firstboot" command itself doesn't perform those tasks AFAIK. It launches external commands (system-config-time, authconfig, etc). I think only maybe the last AVC message was triggered by firstboot itself. I could be wrong though (of course). Dax