LOL, In RedHat I can't read those files at all, but in Fedora it's granted twice: # sesearch --allow -s httpd_sys_script_t -c dir |grep httpd_sys_content_t allow httpd_sys_script_t httpd_sys_content_t : dir { ioctl read getattr lock search } ; allow httpd_sys_script_t httpd_sys_content_t : dir { ioctl read write getattr lock add_name remove_name search } ; Sincerely yours, Vadym Chepkov -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list