Dan, I read your post at <http://danwalsh.livejournal.com/26053.html>, but what I still don't understand is this: on a user's system (actually, my manager's). What I need, and not just for his system, is a way to do what setroubleshoot *used* to do: give me a sealert in a logfile so I can run it from a command line. mark, pro-command line -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux