>> What am I doing wrong?! >> > > Using bind mounts instead of symlinks will help. > It did! I added "/apps/var/log /var/log none bind 0 0" to my fstab file and 2 of the three alerts are now gone. I am still getting this though: kernel: type=1400 audit(1278074918.050:4): avc: denied { write } for pid=1557 comm="login" name="log" dev=sdc ino=16386 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=dir This happens when I try to log in to the console. Any ideas? -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux