dpward / rpms / sssd

Forked from rpms/sssd 3 years ago
Clone

Blame SOURCES/0020-man-Document-invalid-selinux-context-for-homedirs.patch

1bb595
From d8d743870c459b5ff283c89d78b70d1684bd19a9 Mon Sep 17 00:00:00 2001
1bb595
From: Tomas Halman <thalman@redhat.com>
1bb595
Date: Wed, 13 May 2020 09:45:56 +0200
1bb595
Subject: [PATCH] man: Document invalid selinux context for homedirs
1bb595
1bb595
The default value of fallback_homedir expands into path, that is not
1bb595
expected by selinux. Generally not only selinux might be affected by
1bb595
this default value. This PR documents the issue and recommends
1bb595
further steps.
1bb595
1bb595
Resolves:
1bb595
https://github.com/SSSD/sssd/issues/5155
1bb595
1bb595
Reviewed-by: Alexey Tikhonov <atikhonov@redhat.com>
1bb595
---
1bb595
 src/man/include/ad_modified_defaults.xml | 12 ++++++++++++
1bb595
 1 file changed, 12 insertions(+)
1bb595
1bb595
diff --git a/src/man/include/ad_modified_defaults.xml b/src/man/include/ad_modified_defaults.xml
1bb595
index 91623d57a..65c9a0140 100644
1bb595
--- a/src/man/include/ad_modified_defaults.xml
1bb595
+++ b/src/man/include/ad_modified_defaults.xml
1bb595
@@ -92,6 +92,18 @@
1bb595
                     this fallback behavior, you can explicitly
1bb595
                     set "fallback_homedir = %o".
1bb595
                 </para>
1bb595
+                <para>
1bb595
+                    Note that the system typically expects a home directory
1bb595
+                    in /home/%u folder. If you decide to use a different
1bb595
+                    directory structure, some other parts of your system may
1bb595
+                    need adjustments.
1bb595
+                </para>
1bb595
+                <para>
1bb595
+                    For example automated creation of home directories in
1bb595
+                    combination with selinux requires selinux adjustment,
1bb595
+                    otherwise the home directory will be created with wrong
1bb595
+                    selinux context.
1bb595
+                </para>
1bb595
             </listitem>
1bb595
         </itemizedlist>
1bb595
     </refsect2>
1bb595
-- 
1bb595
2.21.3
1bb595