Red Hat Bugzilla – Bug 433757
useradd assignes incorrect SELinux type to /var/spool/mail/newuser
Last modified: 2008-03-03 10:07:45 EST
Description of problem:
useradd creates an empty mail spool file, assigning it SELinux type user_home_t.
This can cause problems later, for example when logwatch visits /var/spool/mail
(this was the denial which actually triggered this bug report).
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. login as root
2. useradd sladek
3. ls -lZ /var/spool/mail/sladek
Actual type: user_home_t
Expected type: mail_spool_t
Created attachment 295515 [details]
Patch to fix /var/spool/mail labeling and useradd -Z user_u dwalsh problem
We never reset the setfscreatecon to the default after creating the homedir.
Also if you modify the default SELinux User, useradd execs semanage, but this
was happening before the uid was created so it was failing. Needs to happen
after the UID is created.
Sorry should have commented to Peter.
fixed in shadow-utils-4.1.0-4.fc9,