Daniel J Walsh wrote: > In your > > %post > chcon --R -t httpd_sys_script_exec_t /usr/share/awstats/wwwroot/cgi-bin > chcon -R -t httpd_sys_script_rw_t /var/lib/awstats > > Should be enough. These should not get relabeled in a restorecon since > they are customizable types. You mean the call to semanage is not even necessary ? If I remove its action (with semanage fcontext -d), run chcon on the cgis and run restorecon on them, they are labelled back to usr_t. What do you mean by "customizable types" ? Thanks Aurélien -- http://aurelien.bompard.org ~~~~ Jabber : abompard@xxxxxxxxx "As we enjoy great advantages from inventions of others, we should be glad of an opportunity to serve others by any invention of ours ; and this we should do freely and generously." -- Benjamin Franklin -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list