On Mon, 2006-04-03 at 18:31 +0100, Ron Yorston wrote: > Stephen Smalley wrote: > >A MLS compatibility patch went into Linux 2.6.15 and was back ported to > >one of the FC4 kernel updates. Is your FC4 kernel updated? > > I think I'm entirely up to date: > > # uname -r > 2.6.16-1.2069_FC4 > # rpm -qa | grep selinux > selinux-policy-targeted-1.27.1-2.22 > libselinux-devel-1.23.11-1.1 > libselinux-1.23.11-1.1 Only the kernel matters. 2.6.15 and later should accept a MLS suffix (the :s0 part) on the context of on-disk inodes even if MLS is disabled in the policy. Bugzilla it. -- Stephen Smalley National Security Agency -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list