Sorry, I was mistaken. I'm still getting the original audit message: Feb 16 11:06:50 grant kernel: audit(1108580810.311:0): avc: denied { write } for pid=4662 exe=/usr/sbin/httpd name=mibs dev=hda1 ino=833921 scontext=root:system_r:httpd_t tcontext=system_u:object_r:usr_t tclass=dir I checked selinux-policy-targeted and it seems to be up to date: [root@grant ~]# rpm -q selinux-policy-targeted selinux-policy-targeted-1.17.30-2.75 [root@grant ~]# rpm --verify selinux-policy-targeted Time to learn a little about snmp and selinux, I guess. Thanks, Susan