hi kai, while in permissive mode, selinux just reports policy violations of the avc .. but doesn't block the action. the symlink in /etc/sysconfig should point to /etc/selinux/config and not to /etc/syslinux .. if selinux is disabled, /selinux/enforce does not exist what does the output of `getenforce` tell you ?? btw: are you sure that selinux is the problem ?? -- "In god we trust, the Rest we Monitor" Sebastian Schubert - RHCE Stadtsparkasse Munich Network and IT Security -------------------------- basti-lists at sskm.de