Red Hat Bugzilla – Bug 119237
home directory has wrong selinux attributes after being created by s-c-u
Last modified: 2007-11-30 17:10:39 EST
Description of problem:
This was for a clean install of development snapshot dated 25 March.
If you manually edit /etc/security/selinux/src/policy/users and add a
definition for an admin user, when you create this user with s-c-u,
the selinux attributes are wrong and you cannot login until you run
"fixfiles relabel" or "make relabel".
This is likely related to other similar reports.
I have experienced this problem in FC2 Test2, specifically I had to do:
/usr/sbin/setfiles /etc/security/selinux/file_contexts /home
to be able to log on as a user after creating the user via s-c-u.
I should credit:
for helping me understand the problem and fix.
Shouldn't s-c-u automatically do something like that after creating
the user account?
I added the SELinux widgets to the UI before the libuser bits to
actually create the user roles has been created. The bits haven't
been added to libuser yet, so the widgets don't currently do anything.
I will wire them up as soon as libuser is SELinux aware.
If this is not going to happen before FC2 final, maybe this report
should be change to an RFE as a "tickler" for FC3.