this is new: (log message is showing loads of these,but I don't see this getting in the way of anything). type=1107 audit(1268786484.482:3): user pid=1277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='' [ 8.482858] type=1107 audit(1268786484.482:4): user pid=1277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='' [ 8.514268] type=1107 audit(1268786484.514:5): user pid=1277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='' [ 8.514803] type=1107 audit(1268786484.514:6): user pid=1277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='' [ 8.515396] type=1107 audit(1268786484.515:7): user pid=1277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='' [ 8.515891] type=1107 audit(1268786484.515:8): user pid=1277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='' I'll have a look tomorrow to see if this is kernel, and/or policy only change I did was update libc,kernel(add ima integrity) and add fcron/logrotate with pam support. any ideas? -- Justin P. Mattock -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.