From 74d920c3b50aac71b689e6d55a175901a3f604b0 Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Thu, 6 Dec 2007 14:35:44 +0000 Subject: [PATCH] trunk: add setrlimit to debian cron. --- policy/modules/services/cron.te | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/policy/modules/services/cron.te b/policy/modules/services/cron.te index d9d06339..bd8f06ab 100644 --- a/policy/modules/services/cron.te +++ b/policy/modules/services/cron.te @@ -1,5 +1,5 @@ -policy_module(cron,1.8.2) +policy_module(cron,1.8.3) gen_require(` class passwd rootok; @@ -163,6 +163,9 @@ userdom_list_all_users_home_dirs(crond_t) mta_send_mail(crond_t) ifdef(`distro_debian',` + # pam_limits is used + allow crond_t self:process setrlimit; + optional_policy(` # Debian logcheck has the home dir set to its cache logwatch_search_cache_dir(crond_t)