Ok, the problem is we label lpr executables and there is a generic transition from unconfined domain but without role access. Could you please open a new bug where we could discuss it more and widely. Thank you. Regards, Miroslav -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx http://lists.fedoraproject.org/admin/lists/selinux@xxxxxxxxxxxxxxxxxxxxxxx
