useradd: Set proper SELinux labels for def_usrtemplate

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>

shadow-4.14.0-useradd-def-usrtemplate-selinux-label.patch

@@ -0,0 +1,28 @@
+From 48aa12af31c0b72872b411857d03a518a4200a3d Mon Sep 17 00:00:00 2001
+From: Johannes Segitz <jsegitz@suse.de>
+Date: Tue, 26 Sep 2023 15:14:14 +0200
+Subject: [PATCH] useradd: Set proper SELinux labels for def_usrtemplate
+
+Fixes: 74c17c716 ("Add support for skeleton files from /usr/etc/skel")
+
+Signed-off-by: Johannes Segitz <jsegitz@suse.com>
+---
+ src/useradd.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/useradd.c b/src/useradd.c
+index 76a4d649..fe62a051 100644
+--- a/src/useradd.c
++++ b/src/useradd.c
+@@ -2788,7 +2788,7 @@ int main (int argc, char **argv)
+ 		if (home_added) {
+ 			copy_tree (def_template, prefix_user_home, false, true,
+ 			           (uid_t)-1, user_id, (gid_t)-1, user_gid);
+-			copy_tree (def_usrtemplate, prefix_user_home, false, false,
++			copy_tree (def_usrtemplate, prefix_user_home, false, true,
+ 			           (uid_t)-1, user_id, (gid_t)-1, user_gid);
+ 		} else {
+ 			fprintf (stderr,
+-- 
+2.41.0
+

shadow-utils.spec

@@ -1,7 +1,7 @@
 Summary: Utilities for managing accounts and shadow password files
 Name: shadow-utils
 Version: 4.14.0
-Release: 1%{?dist}
+Release: 2%{?dist}
 Epoch: 2
 License: BSD-3-Clause AND GPL-2.0-or-later
 URL: https://github.com/shadow-maint/shadow
@@ -23,6 +23,8 @@ Patch0: shadow-4.14.0-manfix.patch
 Patch1: shadow-4.2.1-date-parsing.patch
 # Audit message changes - partially upstreamed
 Patch2: shadow-4.14.0-audit-update.patch
+# https://github.com/shadow-maint/shadow/pull/812
+Patch3: shadow-4.14.0-useradd-def-usrtemplate-selinux-label.patch
 
 ### Dependencies ###
 Requires: audit-libs >= 1.6.5
@@ -261,6 +263,9 @@ rm -f $RPM_BUILD_ROOT/%{_libdir}/libsubid.a
 %{_libdir}/libsubid.so
 
 %changelog
+* Tue Oct  3 2023 Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-2
+- useradd: Set proper SELinux labels for def_usrtemplate
+
 * Wed Aug 16 2023 Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-1
 - Rebase to version 4.14.0. Resolves: #2229000