Hello ! The current behaviour of selinux_check_passwd_access() is to succeed even if the "passwd" class does not exist (see checkAccess.c:21). Is this really the intended behaviour ?? It would make more sense if it failed in such case (as in mapping.c:66)... Or am I wrong ? Guido Trentalancia -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.