URL:
https://github.com/SSSD/sssd/pull/189
Title: #189: SELINUX: Use getseuserbyname to get IPA seuser
lslebodn commented:
"""
@justin-stephenson are you able to reproduce bug with `semanage login -d testuser`
Because I used a little bit complicated test-case and I still can reproduce bug from
comment
https://pagure.io/SSSD/sssd/issue/3308#comment-220396
```
(Mon Apr 3 13:07:22 2017) [[sssd[selinux_child[1578]]]] [main] (0x2000): Running with
effective IDs: [0][0].
(Mon Apr 3 13:07:22 2017) [[sssd[selinux_child[1578]]]] [main] (0x2000): Running with
real IDs [0][0].
(Mon Apr 3 13:07:22 2017) [[sssd[selinux_child[1578]]]] [main] (0x0400): context
initialized
(Mon Apr 3 13:07:22 2017) [[sssd[selinux_child[1578]]]] [unpack_buffer] (0x2000): seuser
length: 12
(Mon Apr 3 13:07:22 2017) [[sssd[selinux_child[1578]]]] [unpack_buffer] (0x2000): seuser:
unconfined_u
(Mon Apr 3 13:07:22 2017) [[sssd[selinux_child[1578]]]] [unpack_buffer] (0x2000):
mls_range length: 14
(Mon Apr 3 13:07:22 2017) [[sssd[selinux_child[1578]]]] [unpack_buffer] (0x2000):
mls_range: s0-s0:c0.c1023
(Mon Apr 3 13:07:22 2017) [[sssd[selinux_child[1578]]]] [unpack_buffer] (0x2000):
username length: 5
(Mon Apr 3 13:07:22 2017) [[sssd[selinux_child[1578]]]] [unpack_buffer] (0x2000):
username: admin
(Mon Apr 3 13:07:22 2017) [[sssd[selinux_child[1578]]]] [main] (0x0400): performing
selinux operations
(Mon Apr 3 13:07:22 2017) [[sssd[selinux_child[1578]]]] [seuser_needs_update] (0x2000):
getseuserbyname: ret: 0 seuser: admin mls: unknown
(Mon Apr 3 13:07:22 2017) [[sssd[selinux_child[1578]]]] [sss_semanage_init] (0x0020):
SELinux policy not managed
(Mon Apr 3 13:07:22 2017) [[sssd[selinux_child[1578]]]] [set_seuser] (0x0020): Cannot
init SELinux management
(Mon Apr 3 13:07:22 2017) [[sssd[selinux_child[1578]]]] [main] (0x0020): Cannot set
SELinux login context.
(Mon Apr 3 13:07:22 2017) [[sssd[selinux_child[1578]]]] [main] (0x0020): selinux_child
failed!
```
"""
See the full comment at
https://github.com/SSSD/sssd/pull/189#issuecomment-291138493