Ouch! Somehow I managed to convince myself that id would be bright enough to interpret 'give me the security context for the current user' as 'give me the security context of the process that invoked id'. It's a bit harsh to say 'id lies', but it sure is misleading. Time to fall back to ps, where I can specify the process of interest. Thanks for the answer! -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx http://lists.fedoraproject.org/admin/lists/selinux@xxxxxxxxxxxxxxxxxxxxxxx