On Wed, 16 Jun 2004 08:07, Tom London <selinux@xxxxxxxxxxx> wrote: > I'm confused.... restorecon.te has entries: > allow restorecon_t device_type:{ chr_file blk_file } { getattr > relabelfrom relabelto }; > allow restorecon_t device_t:{ chr_file blk_file } { getattr relabelfrom }; Ideally there should be no device nodes with type device_t, we should have correct labels assigned to all of them. Therefore changing a label from something in device_type to device_t is generally not desired. -- http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark http://www.coker.com.au/postal/ Postal SMTP/POP benchmark http://www.coker.com.au/~russell/ My home page