<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Mon, May 20, 2013 at 5:51 PM, Sandro Mani <span dir="ltr"><<a href="mailto:manisandro@gmail.com" target="_blank">manisandro@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I've just hit a bug which causes $HOME to be owned by root if a mountpoint is created inside $HOME during install, see [1].<br>
</blockquote></div><br></div><div class="gmail_extra">Ouch. Recent libuser versions refuse to do anything about a home directory (... which should cause the whole "create user" process to fail) if $HOME already exists - and this is necessary for security reasons.<br>
<br></div><div class="gmail_extra">I'd much rather prohibit this case - if you want to set up a mountpoint within $HOME, create the user first. It would admittedly be a really ugly policy, however I think it's still better than the security risk.<br>
</div><div class="gmail_extra"> Mirek<br></div></div>