Maciej Żenczykowski wrote: >>> Weird, I'm not seeing this... >> >> Are using an selinux-enabled CentOS 4.2 (or RHEL4U2) box? > > Yes, an up2date Centos 4.2 box with selinux at the default targeted value. > > However: > $ su - > Password: > # selinuxenabled; echo $? > 0 > # getenforce > Enforcing Interesting. All our boxes that show this behavior were installed originally CentOS 4.1, and upgraded to 4.2. Further, my personal box is only using selinux in permissive mode (too much breakage), but I still see the second prompt. -- Rex