(In reply to Matej Cepl from comment #4) > I see it after setup when checking AVCs (because of otherwise broken system, > but I think that is without relationship to SELinux). BTW, yes I have fixed my system, and it had nothing to do with SELinux (gh#containers/podman#18514; who thought that this brittle system should be the foundation of everything is crazy). And yes, I see this still around: mitmanek:~ # ausearch -m AVC -ts boot ---- time->Sun Feb 18 08:47:43 2024 type=AVC msg=audit(1708242463.365:43): avc: denied { execmem } for pid=1240 comm="ModemManager" scontext=system_u:system_r:modemmanager_t:s0 tcontext=system_u:system_r:modemmanager_t:s0 tclass=process permissive=1 ---- time->Sun Feb 18 14:32:13 2024 type=AVC msg=audit(1708263133.709:117): avc: denied { execmem } for pid=1240 comm="ModemManager" scontext=system_u:system_r:modemmanager_t:s0 tcontext=system_u:system_r:modemmanager_t:s0 tclass=process permissive=1 ---- time->Wed Feb 21 10:01:32 2024 type=AVC msg=audit(1708506092.952:5232): avc: denied { nlmsg_read } for pid=23343 comm="ss" scontext=system_u:system_r:container_t:s0:c307,c487 tcontext=system_u:system_r:container_t:s0:c307,c487 tclass=netlink_tcpdiag_socket permissive=1 mitmanek:~ #