Bug 186594 - genhomdircon referencing samba/nis users
Summary: genhomdircon referencing samba/nis users
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 5
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Russell Coker
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2006-03-24 16:29 UTC by Orion Poplawski
Modified: 2007-11-30 22:11 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2006-04-11 18:06:27 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Orion Poplawski 2006-03-24 16:29:49 UTC
Description of problem:

With latest FC5 update testing selinux stuff:

nome$ homedir /bin/false or its parent directory conflicts with a
defined context in /etc/selinux/targeted/contexts/files/file_contexts,
/usr/sbin/genhomedircon will not create a new context.
myrddraal$ homedir /bin/false or its parent directory conflicts with a
defined context in /etc/selinux/targeted/contexts/files/file_contexts,
/usr/sbin/genhomedircon will not create a new context.
coop01$ homedir /bin/false or its parent directory conflicts with a
defined context in /etc/selinux/targeted/contexts/files/file_contexts,
/usr/sbin/genhomedircon will not create a new context.
coop00$ homedir /bin/false or its parent directory conflicts with a
defined context in /etc/selinux/targeted/contexts/files/file_contexts,
/usr/sbin/genhomedircon will not create a new context.

I really don't know what is trying to happen here.  I our configuration, we use
NIS for users, automount /home from the central server, and use samba.  The
above users are machine accounts for the samba domain.  Perhaps nothing to worry
about, but thought I'd report.

Version-Release number of selected component (if applicable):
 selinux-policy          noarch     2.2.25-2.fc5     updates-testing   407 k
 selinux-policy-targeted  noarch     2.2.25-2.fc5     updates-testing   472 k


How reproducible:
 Several machies reported the same.

Comment 1 Daniel Walsh 2006-04-11 18:02:30 UTC
This looks like the python is acting incorrectly.  

How many fields does ypcat passwd show per record?  Looks like it thinks the
homedir directory is the shell directory at least for these records

Dan

Comment 2 Orion Poplawski 2006-04-11 18:06:27 UTC
Whoops, my bad.  Incorrect passwd entries:

nome$:x:6388:501:/dev/null:/bin/false:

versus

lynx$:x:6381:501::/dev/null:/bin/false

Sorry about that.


Note You need to log in before you can comment on or make changes to this bug.