On Sat, 2005-05-14 at 20:39 +1000, Russell Coker wrote: > What messages do you see in /var/log/audit/audit.log? This is what I get: ype=KERNEL msg=audit(1116142236.929:9075412): syscall=125 per=400000 exit=-13 a0=294000 a1=41000 a2=5 a3=bf8ba290 items=0 pid=6079 loginuid=-1 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 comm=vpnclient exe=/opt/cisco-vpnclient/bin/vpnclient type=KERNEL msg=audit(1116142236.929:9075412): avc: denied { execmod } for path=/opt/cisco-vpnclient/lib/libvpnapi.so dev=hda2 ino=1293106 scontext=user_u:system_r:unconfined_t tcontext=root:object_r:usr_t tclass=file > Try using chcon to change the type of libvpnapi.so to shlib_t. What is the command for this, is it chcon -v shlib_t /opt/cisco-vpnclient/lib/libvpnapi.so ( I have not used chcon before, so I am not sure how to supply the CONTEXT). Thanks for your help. Chandana