> > > I think apps generally do access checks for legitimate reasons and not > > for their health. > > except nautilus... I actually have nautilus confined so i can actually verify/confirm all this. I will do that and get back to you with results -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux