I''ve been doing some work lately to create new native types that allow Puppet to manage SELinux features natively. So far, I have: - Policy module loading, unloading, and upgrading - File context - SEL Booleans There''s plenty more work that could be done, but with these three working it should be at a point where it''s useful to start getting real work done. Anyone who''s interested, can check it out at http://spook.wpi.edu -- Frank Sweetser fs at wpi.edu | For every problem, there is a solution that WPI Senior Network Engineer | is simple, elegant, and wrong. - HL Mencken GPG fingerprint = 6174 1257 129E 0D21 D8D4 E8A3 8E39 29E3 E2E8 8CEC