On 09/08/2015 05:06 AM, kuangjiou wrote: > According to this webpage, > http://selinuxproject.org/page/TypeRules > > Policy versions 25 and above also support a 'name transition' rule > > But the policy versions of my os is 26,I don't know why the type_trasition rule didn't work To see what version is supported by your kernel: cat /selinux/policyvers or cat /sys/fs/selinux/policyvers (depending on where you have selinuxfs mounted) Make sure you don't have CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX set in your kernel .config. That was a legacy option for backward compatibility with Fedora 3 and 4, and forces the kernel to an old policy version. You don't want it. _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.