I tried seting a category on a directory in /tmp and then (with touch) creating a file under that directory. So far so good. I then ssh'ed into the system as another user which does not have those categories defined in seusers. This user could access the file. This sounds like a bug to me. Also, is there a way that a category value can be propogated to all files/directories below it? Gene -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list