http://etbe.coker.com.au/2007/11/06/squid-and-se-linux/ As described in the above URL I believe that port 11371 (for GPG key transfer) needs to be labelled as http_port_t to permit GPG to use Squid. -- russell@xxxxxxxxxxxx http://etbe.coker.com.au/ My Blog http://www.coker.com.au/sponsorship.html Sponsoring Free Software development -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.