I'm using the default strict policy for FC 3 SELinux for testing and learning. I see denial messages when I do 'ls -l /etc/shadow', but nothing when I try to do 'mv /etc/shadow /etc/shadow.save'. Uh, I think I read somewhere that only one of a message type will be seen in some situations, but I can't find it now. How do I ensure that every instance of a specific denial is seen? Thanks. Tom Browder