> The more complicated scenario is tasks created before initial policy > load, because those may not be assigned the correct security context. I think we may be interested in that case (tasks created before initial policy load). Would those tasks' operations fail when subsequently selinux policies are loaded and mode set to enforcing? - vatsa