Turns out it was caused by CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX_VALUE being set to the default of 19. After setting it to 22 (same as the Fedora kernel), the problem went away. - James -- James Morris <jmorris@xxxxxxxxx> -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.