Re: genhomedircon errors with NIS

[Daniel J Walsh <dwalsh@redhat.com>]

On 04/20/2009 02:54 PM, Bandan Das wrote:
> Hello,
>
> This is a RHEL 5.3 system with SELinux configured in the targeted mode.
> Whenever genhomedircon is invoked, either as part of loading a new
> policy module or anything else, genhomedircon will report errors going
> through the NIS database :
>
> bdas homedir /h/bdas or its parent directory conflicts with a
> defined context in /etc/selinux/targeted/contexts/files/file_contexts,
> /usr/sbin/genhomedircon will not create a new context. This usually
> indicates an incorrectly defined system account.  If it is a system
> account please make sure its login shell is /sbin/nologin.
>
> /h is where the NIS home directory is automounted and the above message
> appears for all the NIS users.
>
> As expected, running genhomedircon manually with the "-n" switch will
> not spew these messages. If I look at file_contexts, I do not find any
> specified context for /h.
>
>
> Any ideas ?
>
>
>
genhomedircon is trying to label the directory above /h "/" to be 
home_root_t.  It sees this directory and complains.  I think the problem 
here is you actually have a user /h.  What does the homedir of one of 
the users look like?

We have the ability to disable genhomedircon in Fedora 10 and beyond.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.