Hi Stephen, Thanks for the help. Based on the information you provided, I think we will try to make a modified version of restorecon which can run on the development PC, load a specified set of policies, and apply the correct xattrs to the files immediately before we invoke mksqaushfs. Since our development PCs do not yet use SElinux I do not think this should cause a problem in the short term (though I may be wrong). Then we will just need to figure out how to build policies for the embedded device from the development PC. Thank you, Nathan Owen _______________________________________________ selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx