On Wed, 21 Oct 2009, Stephen Smalley <sds@xxxxxxxxxxxxx> wrote: > The useradd in shadow-utils is already modified to: > a) To add the user to seusers via semanage if the -Z option is used to > specify a SELinux user, and > b) set the fscreate context based on matchpathcon() for the user home > dir prior to creating the files there. > > So it should already do the right thing. I had forgotten that useradd in Debian is different from useradd in Fedora. Thanks for letting me know that the Fedora version does what is required. I'll port the changes to Debian when I get time. -- russell@xxxxxxxxxxxx http://etbe.coker.com.au/ My Main Blog http://doc.coker.com.au/ My Documents Blog -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.