OK, how is this suppose to work or is there a bug here ... I am logged in as an admin user but have a couple of regular (non priv) users defined to the system. From the admin user I do "su - genec" and enter genec's password. I then get a prompt to see if I want to change the security context (default=y) and I try role:user_r and type:user_t ... nope, will not accept those (what should I be specifying?). Try again but respond "n" to the prompt ... I get in but there is an error message that su cannot change the directory. Once in I can change the directory. How should this be working. Note: if I ssh into the box I can "su - xx" with no prompts for context changes. Gene