Because Python is not small, I would really like to avoid pulling Python 3 into the base cloud image until we can move Python 2 out. (Ideally, I'd like to move Python out _entirely_, but that's a long, long path. ) It looks like policycoreutils-python in Rawhide is now Python 3. Cloud-init pulls this in because when it moves things around or creates files, it then runs selinux.restorecon on them. I don't _really_ want to say that policycoreutils-python should go back to Python 2, but I don't think everything else is in the cloud image going to be ready for F21. See the change coordination page for Python3 at https://fedoraproject.org/wiki/Changes/Python_3_as_Default) What are the options here? A python 2 module in parallel? Execing /sbin/restorecon instead of using the bindings? Refactoring the code so that running restorecon all the time isn't necessary? -- Matthew Miller -- Fedora Project Architect -- <mattdm@xxxxxxxxxxxxxxxxx> -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux