Okay, I configured my kernel as such: CONFIG_SECURITY_TOMOYO=y CONFIG_SECURITY_TOMOYO_MAX_ACCEPT_ENTRY=2048 CONFIG_SECURITY_TOMOYO_MAX_AUDIT_LOG=1024 # CONFIG_SECURITY_TOMOYO_OMIT_USERSPACE_LOADER is not set CONFIG_SECURITY_TOMOYO_POLICY_LOADER="/sbin/tomoyo-init" CONFIG_SECURITY_TOMOYO_ACTIVATION_TRIGGER="/usr/lib/systemd/systemd" And installed the latest tomoyo-tools (2.5) for my kernel (3.8.2). I then initialized the policy (/usr/lib/tomoyo/init_policy). Upon reboot, the Domain Transition Editor is still listing <kernel> as the only domain. In dmesg the only tomoyo related message I get is this: [ 0.000103] Security Framework initialized [ 0.000126] TOMOYO Linux initialized What am I doing wrong? The kernel doesn't seem to want to track new domains. -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://lists.osdn.me/mailman/archives/tomoyo-users-en/attachments/20130312/8916688a/attachment.html>