avc: denied { search } for pid=3019 exe=/usr/sbin/glibc_post_upgrade name=1 dev=proc ino=65538 scontext=root:sysadm_r:rpm_t tcontext=system_u:system_r:init_t tclass=dir Jeff, it seems that the glibc post upgrade script run when a new glibc package is installed gets run as rpm_t not rpm_script_t. Do you have any ideas why this is? -- http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark http://www.coker.com.au/postal/ Postal SMTP/POP benchmark http://www.coker.com.au/~russell/ My home page