Due to the problems I've described recently, I fully reloaded my selinux policy and finally did a full relabel. During this relabel, I saw things such as the following: restorecon reset /var/named/chroot/etc/pki/dnssec-keys/harvest/time.gov.conf context system_u:object_r:cert_t:s0->system_u:object_r:etc_t:s0 and when I run system-config-selinux and go to "File labeling" and search for pki, indeed I only see pki in the two following file specs: /etc/pki(/.*)? /etc/pki/dovecot(/.*)? The policy currently installed is: selinux-policy-3.6.12-69.fc11.noarch selinux-policy-targeted-3.6.12-69.fc11.noarch Am I missing something? Is this an expected change? Thanks Eddie -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list