After fixing some unforeseen collateral damage that crept in when we started using roles in SELinux policy, I think we've got oddjob working again and doing the right thing in F9.

The bits in the oddjob-mkhomedir package make a good example of how you can get something useful going rather easily.

Dan pointed out that having pam_oddjob_mkhomedir.so refrain from doing anything if the user's home directory exists would be less wasteful in the cases where the user doesn't need her home directory created.

It's occurred to me that while having the pam_oddjob_mkhomedir.so module make the request is okay, that it's something that could be generalized to let arbitrary things be triggered at login-time.

Then of course there's the PolicyKit integration (branch), which works, but needs to be gone over again to make sure it doesn't do anything super-dumb.

Maybe I'll propose a talk (or a lightning talk) about oddjob for FUDCon. Or else just barge into David's PolicyKit talk.