Hi, Once n a while I find mislabeled files on the file system. Since I never touched them, I assume it is due to the policy change. What is the best practice, shall I relabel the system every time selinux-policy-targeted is updated? For example: # restorecon -vR /usr/ restorecon reset /usr/libexec/sesh context system_u:object_r:bin_t:s0->system_u:object_r:shell_exec_t:s0 # restorecon -vR /var restorecon reset /var/lib/rsyslog context system_u:object_r:var_lib_t:s0->system_u:object_r:syslogd_var_lib_t:s0 Regards, Vadym -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux
