rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

add missing pieces of crond_t -> $1_crond_t transition

Browse Source
This commit is contained in:
Chris PeBenito 2005-06-01 19:01:28 +00:00
parent 0447352aec
commit 6d9915d615
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
refpolicy/policy/modules/services/cron.if
View File

@ -46,6 +46,10 @@ allow $1_crond_t $1_cron_spool_t:file entrypoint;
# transition, since crontabs are configuration files, not executables.
allow crond_t $1_crond_t:process transition;
dontaudit crond_t $1_crond_t:process { noatsecure siginh rlimitinh };
allow crond_t $1_crond_t:fd use;
allow $1_crond_t crond_t:fd use;
allow $1_crond_t crond_t:fifo_file rw_file_perms;
allow $1_crond_t crond_t:process sigchld;
kernel_read_system_state($1_crond_t)
kernel_read_kernel_sysctl($1_crond_t)