When a shell script "fu" is run in a type and has it's own _exec_t ls -Z fu -rwxr-xr-x. root root system_u:object_r:futype_exec_t:SystemLow fu should futype_t require allow futype_t shell_exec_t:file execute; to exec the shell? I ask because we seem to be seeing different results on this question between RHEL 7.7 and 7.8 and we could not decide what was actually correct. joe