> I read that HOWTO, actually, and the stuff you're describing isn't really explained in it. Did you read this part? It explains a solution to your first gripe

> I read that HOWTO, actually, and the stuff you're describing isn't really explained in it. Did you read this part? It explains a solution to your first gripe: https://wiki.centos.org/HowTos/SELinux#head-0f6390ddacfab39ee973ed8018a32212c2a02199 https://wiki.centos.org/HowTos/SELinux#head-0f6390ddacfab39e... I find audit2why helpful, as well as semanage boolean -l, semanage user -l, semanage fcontext -l. Often times more than not, these tools either help me fix an 'audit' issue or point me in the right direction. Check them out sometime, if you don't want to go digging through docs or serverfault - the labels tend to be generally straight forward IMO :-)