I was explaining the concept of (type) attributes using the domain type attribute as an example on IRC, and a sharp person embarrassed me by noting that the following rule returns nothing where he would have expected something: sesearch -A -d -s domain -c process -p fork Why does this not return anything? Is is because the target is "self"? -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.