On 01/19/2010 04:33 AM, Göran Uddeborg wrote: > Daniel J Walsh: >> If you use ausearch -m avc to look for this avc, is there some info >> setroubleshoot might have dropped? > > It didn't miss anything. It just gave exactly the same info as in the > end of the SETroubleshoot message. > > (But looking at that and the surrounding events, I realised these > AVC:s happen when the machine goes down, not when it comes back up as > I first thought. That could be one more clue. I'll keep searching.) Yes the only time the plymouth context happens is on the way down. Plymouth runs before selinux policy is loaded when booting, so it runs as the kernel_t on the way up. -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux