From Debian package 0.0.20080702-1 Updated in 0.0.20080702-12 (changed __default__ from s0 to s0-mcs_systemhigh) 0003-Make-default-and-root-mcs-seusers-unconfined.patch Make root and __default__ map to unconfined_u Make the default range for MCS __default__ users be s0-s0:c0.c1023, this fixes a problem with restarting daemons after logging in as non-root and running "su -". Index: config/appconfig-mcs/seusers =================================================================== --- config/appconfig-mcs/seusers.orig +++ config/appconfig-mcs/seusers @@ -1,3 +1,3 @@ system_u:system_u:s0-mcs_systemhigh -root:root:s0-mcs_systemhigh -__default__:user_u:s0 +root:unconfined_u:s0-mcs_systemhigh +__default__:unconfined_u:s0-mcs_systemhigh