Hi Pavel, I played around with selinux a bit and the restore seems to work (although I'm only using some default profiles in fedora, so it could still break). I belive I've addressed all the review comments from the first patch, and this patch also includes a testcase for apparmor (although it is only run on a host where apparmor is enabled). Thanks, Tycho