On 03/12/2013 04:07 PM, Kahlil Hodgson wrote: > If you are upgrading from 6.3 to 6.4 and you use shorewall, you will > want to run > > restorecon -Rv /sbin That's odd. Part of the selinux postinstall script involves running "fixfiles" on any files whose context has changed. I confirmed that the iptables contexts changed when I ran restorecon on one system, but I can't understand why they weren't fixed by the postinstall script.