On Monday 06 December 2004 22:13, Richard Hally <rhallyx@xxxxxxxxxxxxxx> wrote: > Included below are the avc denied messages from trying to do an > autorelabel while in enforcing mode with the strict policy. > there are also messages about line 64 of rc.sysinit: permission denied. > Looks like sysinit(initrc_t) is trying to write to /selinux/enforce with > out being allowed to do so. can_setenforce(initrc_t) We need to add the above to initrc.te inside the ifdef(`distro_redhat' part. -- http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark http://www.coker.com.au/postal/ Postal SMTP/POP benchmark http://www.coker.com.au/~russell/ My home page