more fixes for targeted

This commit is contained in:
Chris PeBenito 2005-07-19 19:37:43 +00:00
parent 2ec4c9d38f
commit ec848d247f
2 changed files with 4 additions and 6 deletions

View File

@ -23,13 +23,13 @@
/var/spool/at/[^/]* -- <<none>>
/var/spool/cron -d context_template(system_u:object_r:cron_spool_t,s0)
/var/spool/cron/root -- context_template(system_u:object_r:sysadm_cron_spool_t,s0)
#/var/spool/cron/root -- context_template(system_u:object_r:sysadm_cron_spool_t,s0)
/var/spool/cron/[^/]* -- <<none>>
/var/spool/cron/crontabs -d context_template(system_u:object_r:cron_spool_t,s0)
/var/spool/cron/crontabs/.* -- <<none>>
/var/spool/cron/crontabs/root -- context_template(system_u:object_r:sysadm_cron_spool_t,s0)
#/var/spool/cron/crontabs/root -- context_template(system_u:object_r:sysadm_cron_spool_t,s0)
/var/spool/fcron -d context_template(system_u:object_r:cron_spool_t,s0)
/var/spool/fcron/.* <<none>>

View File

@ -127,10 +127,8 @@ ifdef(`distro_redhat', `
')
')
ifdef(`targeted_policy', `
term_dontaudit_use_unallocated_tty(crond_t)
term_dontaudit_use_generic_pty(crond_t)
files_dontaudit_read_root_file(crond_t)
ifdef(`targeted_policy',`
unconfined_domain_template(crond_t)
')
tunable_policy(`fcron_crond', `