more fixes for targeted
This commit is contained in:
parent
2ec4c9d38f
commit
ec848d247f
@ -23,13 +23,13 @@
|
||||
/var/spool/at/[^/]* -- <<none>>
|
||||
|
||||
/var/spool/cron -d context_template(system_u:object_r:cron_spool_t,s0)
|
||||
/var/spool/cron/root -- context_template(system_u:object_r:sysadm_cron_spool_t,s0)
|
||||
#/var/spool/cron/root -- context_template(system_u:object_r:sysadm_cron_spool_t,s0)
|
||||
|
||||
/var/spool/cron/[^/]* -- <<none>>
|
||||
|
||||
/var/spool/cron/crontabs -d context_template(system_u:object_r:cron_spool_t,s0)
|
||||
/var/spool/cron/crontabs/.* -- <<none>>
|
||||
/var/spool/cron/crontabs/root -- context_template(system_u:object_r:sysadm_cron_spool_t,s0)
|
||||
#/var/spool/cron/crontabs/root -- context_template(system_u:object_r:sysadm_cron_spool_t,s0)
|
||||
|
||||
/var/spool/fcron -d context_template(system_u:object_r:cron_spool_t,s0)
|
||||
/var/spool/fcron/.* <<none>>
|
||||
|
@ -127,10 +127,8 @@ ifdef(`distro_redhat', `
|
||||
')
|
||||
')
|
||||
|
||||
ifdef(`targeted_policy', `
|
||||
term_dontaudit_use_unallocated_tty(crond_t)
|
||||
term_dontaudit_use_generic_pty(crond_t)
|
||||
files_dontaudit_read_root_file(crond_t)
|
||||
ifdef(`targeted_policy',`
|
||||
unconfined_domain_template(crond_t)
|
||||
')
|
||||
|
||||
tunable_policy(`fcron_crond', `
|
||||
|
Loading…
Reference in New Issue
Block a user