On Sat, Apr 08, 2006 at 18:23:57 +0100, Paul Howarth <paul@xxxxxxxxxxxx> wrote: > > Don't know much about writing custom policy modules from scratch, but > the context management should be easy enough using semanage. > > semanage doesn't change the contexts of existing files, it changes the > underlying policy. This means that changes made using semanage will be > effected if you use "restorecon" or do a full relabel. Thanks I had missed that. I had a mishap just last night when I rebooted after using setsebool to change a setting and had it unexpectedly reset. I see now, that I should be using semanage to be making persistant changes.