I have been fooling around with RBAC and roles to see how it works and could be used. If I understand correctly, either ` 1. In order to add a new roles, you need to modify the source in the src.rpm and create a "new" policy: gop or "Gene'c Own Policy". or 2. I do not know the correct "magic dance" to perform to add a new role definition to an existing policy. Comment? Gene -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list