Hello everybody, perhaps a newbie question; should it be the case, please beg your pardon. Let's imagine a user acquire root rights. Especially on Fedora Core, which modify su command to automatically map it to sysadm_r role, couldn't he/she simply disable SELinux, delete logs, and so on? Hope to hear from you soon, Paolo De Nictolis, Eng. -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list