Hi Aaron, Thanks for that. I'd come to the conclusion that the policy was the issue... Selinux is working, it's just configured in such a way that when enforced the policy starts denying me access to... everything, which is a policy issue as far as I understand it. I did briefly look at the reference policy and built it from source but don't have the time to play around until I have something usable (some things are still denied e.g. cryptsetup mounting /home). That's not the first time I've been told to install Fedora for selinux so have gone ahead and done so. Thanks ledefi.88 <div class="gmail_quote">2008/12/25 Aaron Toponce <<a href="mailto:atoponce@ubuntu.com">atoponce@ubuntu.com</a>> <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div class="Ih2E3d">ledefi.88 wrote: > So, how do I get to the point where I have a policy running in enforcing > mode on my system? I can clearly get selinux working... but the policy > being used seems to be the problem. </div>SELinux is massively and horribly broken on Ubuntu 8.10. I've spent countless hours trying to get it to work, all wasted. If you must run SELinux, I'd install Fedora, as the Targeted policy is written by Red Hat employees, and Just Works on Red Hat based distros. For Ubuntu, I'd run and learn AppArmor until SELinux gets fixed. Just my two cents. --  ,-O  Aaron Toponce O   } Ubuntu Member  `-O  <a href="http://www.ubuntu.com" target="_blank">http://www.ubuntu.com</a> -- ubuntu-hardened mailing list <a href="mailto:ubuntu-hardened@lists.ubuntu.com">ubuntu-hardened@lists.ubuntu.com</a> <a href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-hardened" target="_blank">https://lists.ubuntu.com/mailman/listinfo/ubuntu-hardened</a> </blockquote></div>