Re: adduser script

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Wed, May 19, 2004 at 09:44:40AM -0400, Ed Street wrote:
> Hello,
> 
> That should work. One other thing you may want do is give the user a choice
> in which role(s) to assign, that would eliminate any typo's and be newbie
> friendly, say 1) user_r 2) staff_r 3 sysadm_r q) quit or something similar.
> By default any abuser not in the users file is assigned user_r.
 
 ed, looks like tresys have already done the hard work with the seuseradd
 scripts as part of the setools package (in cvs on sf.net at least)

 the seuseradd scripts, however, duplicate the role of adduser, by
 1) calling useradd (which manages /etc/passwd) 2) modifying
 /etc/selinux/users direct.

 what is ideally required is a separate program that doesn't call
 useradd, then it's a trivial task to write a plugin for adduser-ng
 to call that separate program.

 l.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.