Blame SOURCES/0020-man-Document-invalid-selinux-context-for-homedirs.patch

8aada9
From d8d743870c459b5ff283c89d78b70d1684bd19a9 Mon Sep 17 00:00:00 2001
8aada9
From: Tomas Halman <thalman@redhat.com>
8aada9
Date: Wed, 13 May 2020 09:45:56 +0200
8aada9
Subject: [PATCH] man: Document invalid selinux context for homedirs
8aada9
8aada9
The default value of fallback_homedir expands into path, that is not
8aada9
expected by selinux. Generally not only selinux might be affected by
8aada9
this default value. This PR documents the issue and recommends
8aada9
further steps.
8aada9
8aada9
Resolves:
8aada9
https://github.com/SSSD/sssd/issues/5155
8aada9
8aada9
Reviewed-by: Alexey Tikhonov <atikhonov@redhat.com>
8aada9
---
8aada9
 src/man/include/ad_modified_defaults.xml | 12 ++++++++++++
8aada9
 1 file changed, 12 insertions(+)
8aada9
8aada9
diff --git a/src/man/include/ad_modified_defaults.xml b/src/man/include/ad_modified_defaults.xml
8aada9
index 91623d57a..65c9a0140 100644
8aada9
--- a/src/man/include/ad_modified_defaults.xml
8aada9
+++ b/src/man/include/ad_modified_defaults.xml
8aada9
@@ -92,6 +92,18 @@
8aada9
                     this fallback behavior, you can explicitly
8aada9
                     set "fallback_homedir = %o".
8aada9
                 </para>
8aada9
+                <para>
8aada9
+                    Note that the system typically expects a home directory
8aada9
+                    in /home/%u folder. If you decide to use a different
8aada9
+                    directory structure, some other parts of your system may
8aada9
+                    need adjustments.
8aada9
+                </para>
8aada9
+                <para>
8aada9
+                    For example automated creation of home directories in
8aada9
+                    combination with selinux requires selinux adjustment,
8aada9
+                    otherwise the home directory will be created with wrong
8aada9
+                    selinux context.
8aada9
+                </para>
8aada9
             </listitem>
8aada9
         </itemizedlist>
8aada9
     </refsect2>
8aada9
-- 
8aada9
2.21.3
8aada9