Running latest targeted policy. /usr/share/selinux/targeted/base.pp and enableaudit.pp appear to be identical. That right? If so, I must not understand on how to use. So, how do I load a policy with all the 'dontaudit' rules removed? tom [Sorry for the dumb question....] -- Tom London