Using MLS enforcing in a gnome-terminal with context user_u:user_r:user_t:s0-s15:c0.c1023 I run newrole and get these results newrole -l s1-s1 -- -c "gnome-terminal --disable-factory" Password: ** ** ERROR:(terminal.c:1016):new_terminal_with_options: assertion failed: (profile) I think Joe straced this and has a little more info if he'd like to chime in. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.