More on this..... rhgb now produces a black screen with the X cursor and 'hangs' until the usual graphical login starts. adding read and getattr for usr_t makes this work again: --- /tmp/rhgb.te 2005-05-22 10:20:35.000000000 -0700 +++ ./rhgb.te 2005-05-22 10:09:49.000000000 -0700 @@ -95,4 +95,4 @@ allow initrc_t ramfs_t:sock_file write; allow initrc_t rhgb_t:unix_stream_socket { read write }; -allow rhgb_t default_t:file { getattr read }; +allow rhgb_t { default_t usr_t }:file { getattr read }; Seems a bit heavy weight, but .... tom -- Tom London -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-selinux-list