Hi, I'm wondering about unconfined_t... Is it that, for unconfined_t, there are a bunch of "allow rules" for every type of object and every available type? Is there anything unconfined_t can't do? Thanks, Jorge -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux