From owner-freebsd-questions@FreeBSD.ORG  Fri Oct 25 09:23:04 2013
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTP id 01E74E1F
 for <freebsd-questions@freebsd.org>; Fri, 25 Oct 2013 09:23:04 +0000 (UTC)
 (envelope-from asv@inhio.eu)
Received: from cz-prg-mx-01.inhio.eu (mail.inhio.eu [178.238.36.226])
 by mx1.freebsd.org (Postfix) with ESMTP id BB32D28C0
 for <freebsd-questions@freebsd.org>; Fri, 25 Oct 2013 09:23:03 +0000 (UTC)
Received: from [10.0.0.52] (unknown [10.0.0.52])
 by cz-prg-mx-01.inhio.eu (Postfix) with ESMTPSA id F156A5DF43
 for <freebsd-questions@freebsd.org>; Fri, 25 Oct 2013 09:14:30 +0000 (UTC)
Subject: MAC issue on FBSD 9.1-RELEASE
From: ASV <asv@inhio.eu>
To: freebsd-questions <freebsd-questions@freebsd.org>
Content-Type: text/plain; charset="us-ascii"
Date: Fri, 25 Oct 2013 11:12:55 +0200
Message-ID: <1382692375.92947.9.camel@mailsb>
Mime-Version: 1.0
X-Mailer: Evolution 2.32.1 FreeBSD GNOME Team Port 
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Oct 2013 09:23:04 -0000

Hello there,

I'm wondering if something have been changed regarding MAC on FreeBSD
9.1-RELEASE. Since I've executed freebsd-update basically updating from
the first release to the p7, I cannot longer login with my restricted
accounts.
I always get:

> _secure_path: cannot stat /home/macuser/.login_conf: Permission denied
> login: LOGIN macuser REFUSED (HOMEDIR) ON TTY ttyv1

and on the login screen (user tty) I get:

> login: Could not determine audit condition

no matter if the file is there or not, neither which DAC/MAC permissions
are there, no matter if I disable the ":requirehome:" and the
":ttys.allow:" directives on login.conf. Not even relabling the entire
FS helped.

I've spent several hours now to figure out but at this point seems to me
that the update screwed everything up somehow.
Does anyone have any idea of what's going on? Any input would be REALLY
appreciated.

Thanks in advance.