Thanks all for all the helpful replies. after a few more typos and a few more yum installs i've gotten the .pp created and attempted to load it with semodule -i bugzilla.pp in /var/log/messages i see a similar error to my original post: Jan 4 15:57:11 svn kernel: security: 3 users, 6 roles, 1489 types, 153 bools, 1 sens, 256 cats Jan 4 15:57:11 svn kernel: security: 58 classes, 43765 rules Jan 4 15:57:11 svn dbus: Can't send to audit system: USER_AVC avc: received policyload notice (seqno=13) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?) Jan 4 15:57:11 svn kernel: audit(1167926231.944:32): policy loaded auid=4294967295 Jan 4 15:57:11 svn dbus: Can't send to audit system: USER_AVC avc: 0 AV entries and 0/512 buckets used, longest chain length 0 : exe="?" (sauid=81, hostname=?, addr=?, terminal=?) However, when I try to hit the bugzilla site from a browser I don't see any avc denials in /var/log/messages anymore. So I guess that's fixed that! Great job! Of course, Bugzilla STILL doesn't work. Ho hum... i'll go join some more mailing lists... Thanks again for all the help guys. Time to check the rest of my Bugzilla install for errors now.. <div> On 04/01/07, Stephen Smalley <<a href="mailto:sds@tycho.nsa.gov">sds@tycho.nsa.gov</a>> wrote:<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> On Thu, 2007-01-04 at 15:33 +0000, R Edmonds wrote: > Indeed I did. Oh well at least I got 3 posts in before making an ass > of myself.. > > OK, next hurdle. The step in Pauls instructions: > > # ln -s /usr/share/selinux/devel/Makefile . > > > > I don't have a devel directory in that path. Again, some prerequisite i'm missing? I double checked for typos this time ;) yum install selinux-policy-devel checkpolicy -- Stephen Smalley National Security Agency </blockquote></div>