Running latest Rawhide. I've noticed the following problem that I cannot track down fully. Pulseaudio seems to have stopped working when in enforcing mode, unless I manually change the permissions to the numerous /dev/ files to 666 (e.g., /dev/*dsp*, /dev/audio* /dev/snd/*, ....) I get no AVCs. Below are snippets from /var/log/messages. My (simpleminded) interpretation is that in permissive mode, policykit is running but not when in enforcing. Any suggestions on how to track this down further? tom Permissive: Dec 3 09:48:10 localhost pulseaudio[2947]: polkit.c: Failed to show grant dialog: Unable to lookup exe for caller Dec 3 09:48:10 localhost pulseaudio[2947]: polkit.c: PolicyKit responded with 'auth_admin_keep_always' Dec 3 09:48:10 localhost pulseaudio[2947]: pid.c: Stale PID file, overwriting. Dec 3 09:48:10 localhost pulseaudio[2947]: main.c: setrlimit(RLIMIT_NICE, (31, 31)) failed: Operation not permitted Dec 3 09:48:12 localhost pulseaudio[2947]: module.c: Failed to load module "module-rtp-recv" (argument: ""): initialization failed. Dec 3 09:48:12 localhost pulseaudio[2947]: module-gconf.c: pa_module_load() failed Enforcing: Dec 3 10:59:27 localhost pulseaudio[3995]: pid.c: Stale PID file, overwriting. Dec 3 10:59:27 localhost pulseaudio[3995]: main.c: setrlimit(RLIMIT_NICE, (31, 31)) failed: Operation not permitted Dec 3 10:59:28 localhost pulseaudio[3995]: alsa-util.c: Error opening PCM device hw:0: No such device Dec 3 10:59:28 localhost pulseaudio[3995]: module.c: Failed to load module "module-alsa-sink" (argument: "device_id=0 sink_name=alsa_output.pci_8086_27d8_alsa_playback_0"): initialization failed. Dec 3 10:59:28 localhost pulseaudio[3995]: alsa-util.c: Error opening PCM device hw:0: No such device Dec 3 10:59:28 localhost pulseaudio[3995]: module.c: Failed to load module "module-alsa-source" (argument: "device_id=0 source_name=alsa_input.pci_8086_27d8_alsa_capture_0"): initialization failed. Dec 3 10:59:29 localhost pulseaudio[3995]: module.c: Failed to load module "module-rtp-recv" (argument: ""): initialization failed. Dec 3 10:59:29 localhost pulseaudio[3995]: module-gconf.c: pa_module_load() failed -- Tom London -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list