I found a strange behavior with selinux-policy-3.6.3-8.fc11.noarch. [root@masu ~]# sestatus SELinux status: enabled SELinuxfs mount: /selinux Current mode: enforcing Mode from config file: enforcing Policy version: 24 Policy from config file: targeted [root@masu ~]# touch aaa [root@masu ~]# ls -Z aaa -rw-r--r-- root root unconfined_u:object_r:admin_home_t:s0 aaa [root@masu ~]# id -Z unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c31 [root@masu ~]# chcon -l s0:c0 aaa chcon: failed to change context of `aaa' to `unconfined_u:object_r:admin_home_t:s0:c0': Operation not permitted Why "s0-s0:c0.c31" cannot change the context from "s0" to "s0:c0"? I could reproduce the matter after "semodule -B". Is there anyone who can reproduce the matter? -- KaiGai Kohei <kaigai@xxxxxxxxxxxx> -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
