User home directory creation with useradd (rhbz#217441)

[James Antill <jantill@redhat.com>]

[-- Attachment #1: Type: text/plain, Size: 930 bytes --]


 As some of you know, there's an open BZ about the fact that in a
strict/MLS environment useradd doesn't create the user's homedir with
the correct context[1].
 The problem is that matchpathcon() needs semanage to have run, so we
know what SELinux user the unix user is associated with, but that runs
separately and after useradd. The four obvious solutions are:

1. Have an option for useradd to call semanage to add the selinux user,
and then do the restorecon.

2. Have semanage do the equivalent of a restorecon when doing an
add/modify (or just add) of SELinux user information.

3. Have some kind of wrapper that does:
	i. useradd
	ii. semanage
	iii. restorecon

4. Document that you need to call the list of programs in #3.

 Does anyone have comments on which of the above they like/hate?


[1] http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=217441

-- 
James Antill <jantill@redhat.com>

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]