Change fixfiles to use find and -prune if available. Ivans patch is included The biggest change to this package is the debut of restorecond (probably need a better name). This is a daemon that will read /etc/selinux/restorecond.conf file for a list of files to watch. It uses inotify to signal it when any file gets created. It will then do the equivalent of restorecon on the file. So if you are watching /etc/resolv.conf and the admin uses a script to recreate the file, this daemon will notice and restore it to the correct context. Homedir support: The files need to be fully pathed or contain a "~". "~" will indicate the homedir. restorecond also watches /var/run/utmp file for all users logging in and out, and then watches for the files in the homedir, to be created. This will give us the ability of instantly labeling the ~/public_html directory. So if a user logs in and does a mkdir ~/public_html to tool will label the file correctly. Policycoreutils installs the daemon but does not turn it on by default, yet. I need people to play with it and see what they think. chkconfig --add restorecond service restorecond restart Will turn it on.