I'm tearing my hair out trying to figure out why this rule isn't matching. /usr(/local)?/bin/raidcheck system_u:object_r:raidcheck_exec_t:s0 The rule shows up in the output of 'semanage fcontext -l', so it's loaded, but either /usr/bin/raidcheck and /usr/local/bin/raidcheck are still being set to bin_t. Is there any way to get restorecon to show the steps that it takes to determine the context for a file? -- ======================================================================== In Soviet Russia, Google searches you! ========================================================================