It seems impossible to have policy that allows useradd to always get the right context for the new home directory. I am thinking of patching useradd such that if the -m option is given then it will spawn the command "restorecon -R /home/$USER" - or alternately putting in SE Linux code to match the context for each file or directory that is copied from /etc/skel . What do you think? -- russell@xxxxxxxxxxxx http://etbe.coker.com.au/ My Main Blog http://doc.coker.com.au/ My Documents Blog -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
