[Selinux-commits] SF.net SVN: selinux: [2893] branches/stable/1_0/policycoreutils/scripts/ genhomedircon

[<ssm...@us...>]

Revision: 2893
          http://selinux.svn.sourceforge.net/selinux/?rev=2893&view=rev
Author:   ssmalley
Date:     2008-06-06 07:33:06 -0700 (Fri, 06 Jun 2008)

Log Message:
-----------
Author: Chris PeBenito
Email: peb...@ge...
Subject: policycoreutils user_u seuser vs. genhomedircon
Date: Wed, 28 May 2008 22:30:57 -0400

In the stable branch, genhomedircon will ignore making home dir contexts
for linux users mapped to user_u.  For a long time, this was fine since
user_u was the default for strict and targeted.  With a merged
strict-targeted policy, a more targeted-like system will have
unconfined_u as the default.  If you then try to make a confined user_u
user, a set of home directory contexts will not be created.  This patch
fixes the behavior.  I made a cursory look through the trunk C
genhomedircon, and did not see this behavior, but someone should
probably doublecheck.

Acked-by:  Stephen Smalley <sd...@ty...>

Modified Paths:
--------------
    branches/stable/1_0/policycoreutils/scripts/genhomedircon

Modified: branches/stable/1_0/policycoreutils/scripts/genhomedircon
===================================================================
--- branches/stable/1_0/policycoreutils/scripts/genhomedircon	2008-06-06 14:30:55 UTC (rev 2892)
+++ branches/stable/1_0/policycoreutils/scripts/genhomedircon	2008-06-06 14:33:06 UTC (rev 2893)
@@ -193,7 +193,7 @@
 		return prefix
 		
 	def adduser(self, udict, user, seuser, prefix):
-		if seuser == "user_u" or user == "__default__" or user == "system_u":
+		if user == "__default__" or user == "system_u":
 			return
 		# !!! chooses first prefix in the list to use in the file context !!!
 		try:


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.