Bug 513055

Summary:	User creation problem
Product:	Red Hat Enterprise Linux 5	Reporter:	Damian Myerscough <damian.myerscough>
Component:	shadow-utils	Assignee:	Peter Vrabec <pvrabec>
Status:	CLOSED ERRATA	QA Contact:	BaseOS QE Security Team <qe-baseos-security>
Severity:	medium	Docs Contact:
Priority:	low
Version:	5.5	CC:	damian.myerscough, fnadge, mmalik, ralph, sgrubb, tmraz
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:	Previously, extended Attributes and extended access control lists (ACLs) on files and directories under /etc/skel were dropped when a new user was created. With this update, the files are successfully copied and the extended ACL's are preserved.	Story Points:	---
Clone Of:
Clones:	586796 (view as bug list)		Environment:
Last Closed:	2011-01-13 23:27:41 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	586796

Description Damian Myerscough 2009-07-21 19:27:57 UTC

Description of problem:
When adding extended ACL's to a file or directory below the /etc/skel directory,
these permissions are NOT preserved when a new user is created. 

The file are successfully copied to the users home directory but the extended
ACL's have not been preserved.

Version-Release number of selected component (if applicable):


How reproducible:
Always

Steps to Reproduce:
1. Create a file or directory below the /etc/skel directory
2. Apply an extended ACL to the file or directory
3. Add a user with the "useradd" command
  
Actual results:
The files from the /etc/skel directory are copied but the extended ACL's that
are associated with the files or directory are not preserved.

Expected results:
The file to be successfully copied and the extended ACL's to be preserved

Additional info:
SUSE Enterprise Linux does preserve extended ACL's when copying files from
the /etc/skel directory to the newly created users directory.

Fedora also does not preserve the extended ACL's

Comment 2 Peter Vrabec 2009-11-09 13:28:11 UTC

I have sent patch to upstream today. If they integrate it into upstream release of shadow-utils, I'm ready to back-port it into RHEL.

Comment 4 Peter Vrabec 2010-04-20 15:37:39 UTC

Functionality is available in upstream: revisions 3193
http://svn.debian.org/wsvn/pkg-shadow

Comment 8 Florian Nadge 2011-01-03 16:02:39 UTC

    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Previously, extended Attributes and extended access control lists (ACLs) on files and directories under /etc/skel were dropped when a new user was created. With this update, the files are successfully copied and the extended ACL's are preserved.

Comment 10 errata-xmlrpc 2011-01-13 23:27:41 UTC

An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2011-0094.html