On Fri, 4 Jun 2004 13:29, Chris Grier <grier@xxxxxxxx> wrote: > > What directory is libdevmapper.so.1.00 in? > > Symlinked into /usr/local/lib from > /usr/local/encap/device-mapper-1.00.17/lib > > [chris@localhost chris]$ ls -laZd /usr/local/lib > drwxr-xr-x+ root root system_u:object_r:lib_t /usr/local/lib > > So my next guess is that /usr/local/encap/* is not labeled correctly, > and this is generating the audits (it IS not labled correctly). I didn't > think about this since /usr/local/lib is labeled correctly, athough the > files that encap links in are not. Simple to add this to the file > contexts though. Thanks. /usr/local is for non-package stuff. We have a few common directories from /usr/local in the standard file contexts files for convenience. But if you do anything serious under /usr/local you have to write your own .fc entries. -- http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark http://www.coker.com.au/postal/ Postal SMTP/POP benchmark http://www.coker.com.au/~russell/ My home page