There were some questions as to the meaning of some of the newer permissions not too long ago. I've updated the overview of SELinux object classes and permissions, available here: http://www.tresys.com/selinux. It contains all of the classes and permissions, including the netlink_kobject_uevent_socket class and execstack and execheap process permissions added in 2.6.12. -- Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150 -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-selinux-list