Hi, I'm working on some documentation for the audit system, but I wanted to use this as an example to show people something until I get docs finshed. >type=AVC msg=audit(1122586257.404:286451): avc: denied { search } If you take the number after the ':' in the serial number and use ausearch, you can make this more understandable. Try: ausearch -i -a 286451 See if that makes it easier to understand. -Steve ____________________________________________________ Start your day with Yahoo! - make it your home page http://www.yahoo.com/r/hs -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-selinux-list