#2337 Make ipa-client depend on oddjob-mkhomedir (ipa-client-install --mkhomedir sets wrong selinux contexts on user home drives)
Closed: Fixed None Opened 12 years ago by dpal.

https://bugzilla.redhat.com/show_bug.cgi?id=786223 (Red Hat Enterprise Linux 6)

Description of problem:

When using the --mkhomedir option with ipa-client-install, a user has their
homedir automatically created when first logging in.

the selinux context of this newly created homedir is set to home_root_t instead
of user_home_dir_t

Version-Release number of selected component (if applicable):

Name        : ipa-client
Arch        : x86_64
Version     : 2.1.3
Release     : 9.el6


How reproducible:
every time

Steps to Reproduce:
1. clean install of RHEL 6.2
2. yum install ipa-client -y
3. ipa-client-install -U -p admin -w mysecretpassword --mkhomedir
4. log in as any ipa user..
5. ls -Z /home


Actual results:
[root@server ~]# ls -Z /home/
drwxr-xr-x. user1 user1 unconfined_u:object_r:home_root_t:s0 user1
drwxr-xr-x. user2 user2 unconfined_u:object_r:home_root_t:s0 user2
[root@server ~]#

Expected results:

[root@mail02 ~]# ls -Z /home/
drwxr-xr-x. user1 user1 unconfined_u:object_r:user_home_dir_t:s0 user1
drwxr-xr-x. user2 user2 unconfined_u:object_r:user_home_dir_t:s0 user2
[root@mail02 ~]#

Additional info:

Metadata Update from @dpal:
- Issue assigned to rcritten
- Issue set to the milestone: FreeIPA 2.2 Core Effort - 2012/03

7 years ago

Login to comment on this ticket.

Metadata