I was able to remove a user mapping while there was a login mapping to that user That caused issues because then i later was not able to remove the login mapping because the seuser did not exist. I have to eventually manually edit the various seuser files in /etc/selinux && semodule -B to undo the mess. Also on a somewhat unrelated note: if you add a user with useradd -Z and then later delete the user then the mapping is still left behind without any warnings -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux
