On Wed, 2006-03-29 at 23:18 +0100, Paul Howarth wrote: > On Wed, 2006-03-29 at 13:47 -0800, Florin Andrei wrote: > > SELinux does log a few things, but it says "granted" which is why > > glxgears works. > Perhaps you have the booleans allow_execmem and allow_execmod on? # getsebool -a | grep -e execmem -e execmod allow_execmem --> on allow_execmod --> on Isn't that the default? I know I tweaked a few things, but I don't think I changed those. I could be wrong, though. -- Florin Andrei http://florin.myip.org/