I'm probably dense - CentOS 4.1 # cat /etc/sysconfig/selinux ..snip... SELINUXTYPE=targeted # su - Alec # tail -n 3 /var/log/messages Aug 31 08:48:26 srv1 su(pam_unix)[31435]: session opened for user Alec by root(uid=0) Aug 31 08:48:26 srv1 su[31435]: Warning! Could not relabel /dev/pts/0 with user_u:object_r:devpts_t, not relabeling.Operation not permitted Aug 31 08:48:27 srv1 su(pam_unix)[31435]: session closed for user Alec restorecon -v /dev/pts/0 or restorecon -R /dev/pts don't help My interest is actually trying to remotely run a vnc session to a different computer. I connect to it via ssh # ssh -XC -p XXXX root at fqdn and then run vncviewer # vncviewer 192.168.1.253:0 VNC viewer for X version 4.0 - built Feb 21 2005 15:39:30 Copyright (C) 2002-2004 RealVNC Ltd. See http://www.realvnc.com for information on VNC. vncviewer: unable to open display "" so I was thinking I would try to set up vncserver as the user on that machine but unable to su to a shell for that user means I can't run vncpassword for that user. ;-( Anyone want to toss me a bone on any of these issues (I have been reading SELinux notes at Fedora 3 Craig