PREIN

/bin/sh

if [ $1 -eq 1 ]; then
semanage user -a  -S targeted -P xguest -R xguest_r xguest_u  2> /dev/null  || :
(useradd -c "Guest" -Z xguest_u xguest || semanage login -a -S targeted -s xguest_u xguest || semanage login -m -S targeted -s xguest_u xguest) 2>/dev/null || exit 1

echo "xguest:exclusive" >> /etc/security/sepermit.conf

semanage  boolean -m -S targeted -F /dev/stdin  << _EOF
allow_polyinstantiation=1
xguest_connect_network=1
xguest_mount_media=1
xguest_use_bluetooth=1
_EOF

fi

PREUN

/bin/sh

if [ $1 -eq 0 ]; then
sed -i '/^xguest/d' /etc/security/sepermit.conf

/usr/bin/python << __eof
from sabayon import systemdb
db = systemdb.get_user_database()
db.set_profile("xguest", "")
__eof

fi

POSTIN

/bin/sh

if [ $1 -eq 1 ]; then

# Add two directories to /etc/skell so pam_namespace will label properly
mkdir /etc/skel/.mozilla 2> /dev/null
mkdir /etc/skel/.gnome2 2> /dev/null

/usr/bin/python << __eof
from sabayon import systemdb
db = systemdb.get_user_database()
db.set_profile("xguest", "xguest.zip")
__eof

fi