On Fri, Jun 15, 2012 at 02:12:47PM +0100, Ben Hutchings wrote: > Do you have 'security=selinux' on the kernel command line? Ahh, of course, that helped. Thank you. There is still some weirdness, like id -Z reporting "system_u:system_r:initrc_t:s0" for normal in X11 session (in virtual console session it's the normal-sounding "unconfined"), but that does not seem to be kernel-related.