On 05/31/2011 09:21 AM, Daniel J Walsh wrote: > On 05/29/2011 08:02 AM, Kevin H. Hobbs wrote: >> sealert says: >> >> /var/lock default label should be var_lock_t. > restorecon -R -v /var > Mmm that did it. denyhosts now starts. What made me doubt the advice sealert gave me was that /var/lock did have the label var_lock_t. So I knew the problem was over my head.