Bug 806759

Summary: useradd and userdel don't pass lsb-dist-test-4.1
Product: [Fedora] Fedora Reporter: Xibo Ning <xning>
Component: shadow-utilsAssignee: Xibo Ning <xning>
Status: CLOSED NOTABUG QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 16CC: pvrabec, tmraz
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-07-25 01:28:04 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 807951    
Attachments:
Description Flags
Simple script to test this bug none

Description Xibo Ning 2012-03-26 07:40:02 UTC
Created attachment 572684 [details]
Simple script to test this bug

Description of problem:
useradd and userdel failed to pass lsb-dist-test-4.1

Version-Release number of selected component (if applicable):
4.1.4.3-13

How reproducible:
always

Steps to Reproduce:
1../test.sh
2.
3.
  
Actual results:
1 1

Expected results:
0 0

Additional info:

Comment 1 Xibo Ning 2012-03-26 08:02:15 UTC
Request for comment

Comment 2 Xibo Ning 2012-03-26 08:04:50 UTC
I also submit this bug to linuxfoundation. Pls check here:
https://lsbbugs.linuxfoundation.org/show_bug.cgi?id=3476

We have two solutions to resolve this problem. One is to modify selinux, another is to fix useradd and userdel.
We can disable selinux, or just change useradd and userdel to permissive domain:
semanage permissive -a useradd_t

We can also move useradd and userdel to other place and rename them, then replace the two commands with two scripts. So, in the two scripts we can preprocess selinux context of directories and files, which are needed by useradd and userdel commands. After preprocessed, we then call renamed useradd and userdel to execute as usual.

Surely is ok if we can fix useradd and userdel directly.

Comment 3 Xibo Ning 2012-05-02 09:12:40 UTC
Hi Peter, do you think it is ok that changing useradd and userdel to permissive domain? Please give me some advice, thanks a lot.