Question: why does the groupadd fail here? Is it related to SELinux or maybe a bug? I found the mv /etc/group+ /etc/group problem via strace groupadd.. [root@notebook ~]# groupadd testinggroupadd: failure while writing changes to /etc/group[root@notebook ~]# grep testing /var/log/audit/audit.log type=ADD_GROUP msg=audit(1465386369.617:2553): pid=4008 uid=0 auid=1001 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-group acct=testing exe=/usr/sbin/groupadd hostname=? addr=? terminal=pts/0 res=failed'type=GRP_MGMT msg=audit(1465386369.618:2554): pid=4008 uid=0 auid=1001 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding-shadow-group acct=testing exe=/usr/sbin/groupadd hostname=? addr=? terminal=pts/0 res=failed'type=ADD_GROUP msg=audit(1465386369.618:2555): pid=4008 uid=0 auid=1001 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding-group acct=testing exe=/usr/sbin/groupadd hostname=? addr=? terminal=pts/0 res=failed'type=ADD_GROUP msg=audit(1465386369.618:2556): pid=4008 uid=0 auid=1001 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= acct=testing exe=/usr/sbin/groupadd hostname=? addr=? terminal=pts/0 res=failed'[root@notebook ~]# [root@notebook ~]# ls -Z /usr/sbin/groupadd-rwxr-x---. root root unconfined_u:object_r:groupadd_exec_t:s0 /usr/sbin/groupadd[root@notebook ~]# ls -Z /usr/bin/mv-rwxr-xr-x. root root system_u:object_r:bin_t:s0       /usr/bin/mv[root@notebook ~]# [root@notebook ~]# lsb_release -rRelease:    7.2[root@notebook ~]# [root@notebook ~]# mv -f /etc/group+ /etc/groupmv: cannot move /etc/group+ to /etc/group: Device or resource busy[root@notebook ~]# [root@notebook ~]# sestatusSELinux status:                 enabledSELinuxfs mount:                /sys/fs/selinuxSELinux root directory:         /etc/selinuxLoaded policy name:             targetedCurrent mode:                   enforcingMode from config file:          enforcingPolicy MLS status:              enabledPolicy deny_unknown status:     allowedMax kernel policy version:      28[root@notebook ~]# 
Cannot add group on RHEL desktop
rhel;group;selinux