Return
-
Title
Incorrect SELinux Context on Home Directory -
Description
When a user first logs in with SELinux enforced, the home directory is created with the incorrect SELinux context for the users home directory.
The context for the root user is "home_root_t" but the user context should be "user_home_dir_t".
-
Cause
The home directory script creates the users home directory as root and applies the root user context. It then changes permissions for the user but does not change the user context.
-
Resolution
1 - Download and then upgrade to Authentication Services 4.1.6 that support SeLinux. Click here to download.2 - Configure the selinux policy by running this command:
/opt/quest/bin/vastool configure selinux3 - Run the /opt/quest/bin/vastool status command and check for this message:
INFO: SELinux enabled (Permissive), vasd policy is installed.