On Sat, 2005-03-26 at 10:09 +0100, dragoran wrote: > it still does not work with the restorecon /tmp line and the policy > changes.... > same avcs... Hmmm...Dan reported it working for him with just those two changes. That was on a FC4/devel system with strict policy, but I'd expect it to work fine under FC3 and targeted policy too. Are you sure that you added 'allow tmpfile tmpfs_t:filesystem associate;' to your policy and rebuilt it and installed it? What are the specific avcs that you see? -- Stephen Smalley <sds@xxxxxxxxxxxxx> National Security Agency