Feel free to point me to a link that discusses this, but how *does* selinux decide on roles when I'm using restorecon? Does it use the context of the directory above it, or that it's in, or is there something else? mark -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux