On Fri, 2009-02-06 at 11:58 -0500, Maria Iano wrote: > Thank you so much Dominick - sesearch is a fantastic tool! It tells me > exactly which booleans will do what I need. Either one of two booleans > will provide two of the things I need. So there is only one extra > allow rule that I need to create. Another way to see if there is a boolean for a denial is to pipe the avc denial into the input stream of audit2why (or audit2allow -w) hth, Dominick -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list