Stephen Smalley writes: > Try restorecon -F. > By default, restorecon ignores differences in the user identity (root > vs. system_u). Aha! That explains a bit more. Thanks!