On Fri, 2006-08-04 at 16:29 +0200, David Desscan wrote: > On 8/4/06, Stephen Smalley <sds@xxxxxxxxxxxxx> wrote: > > On Fri, 2006-08-04 at 04:25 +0200, David Desscan wrote: > > > uname -r > > rpm -q selinux-policy-targeted > > > My kernel version is 2.6.17-1.2142_FC4 > SElinux policy targeted version is 1.27.1-2.28 Ok, nothing interesting there (same kernel and policy works fine here for me). /etc/rc.d/rc.sysinit runs restorecon -R /dev to fix up the dev labels created before initial policy load, then udev handles labeling of all subsequent nodes. Can you verify that your rc.sysinit script contains the restorecon -R /dev command? If you run that sequence by hand (but don't redirect stderr to /dev/null), does it work? -- Stephen Smalley National Security Agency