On Tue, 2005-02-22 at 16:44 -0700, Tom Lisjac wrote: > In any case, it appears that I should make the exception and allow the > read. I made a huge mess when I started hacking the policy sources in > FC2... is there a document or howto somewhere that describes the > correct way to add a exception that will survive an rpm policy update? Short answer - /etc/selinux/targeted/src/policy/domains/misc/local.te. Long answer - I tried to compile all the best recommendations here: http://www.redhat.com/docs/manuals/enterprise/RHEL-4-Manual/selinux-guide/selg-section-0120.html File a bug if you hear about one I'm missing. :) - Karsten -- Karsten Wade, RHCE * Sr. Tech Writer * http://people.redhat.com/kwade/ gpg fingerprint: 2680 DBFD D968 3141 0115 5F1B D992 0E06 AD0E 0C41 IT executives rate Red Hat #1 for value http://www.redhat.com/promo/vendor/