rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

more fixes for targeted

Browse Source
This commit is contained in:
Chris PeBenito 2005-07-19 19:37:43 +00:00
parent 2ec4c9d38f
commit ec848d247f
2 changed files with 4 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
refpolicy/policy/modules/services/cron.fc
View File

@ -23,13 +23,13 @@
/var/spool/at/[^/]* -- <<none>> /var/spool/at/[^/]* -- <<none>>
/var/spool/cron -d context_template(system_u:object_r:cron_spool_t,s0) /var/spool/cron -d context_template(system_u:object_r:cron_spool_t,s0)
/var/spool/cron/root -- context_template(system_u:object_r:sysadm_cron_spool_t,s0) #/var/spool/cron/root -- context_template(system_u:object_r:sysadm_cron_spool_t,s0)
/var/spool/cron/[^/]* -- <<none>> /var/spool/cron/[^/]* -- <<none>>
/var/spool/cron/crontabs -d context_template(system_u:object_r:cron_spool_t,s0) /var/spool/cron/crontabs -d context_template(system_u:object_r:cron_spool_t,s0)
/var/spool/cron/crontabs/.* -- <<none>> /var/spool/cron/crontabs/.* -- <<none>>
/var/spool/cron/crontabs/root -- context_template(system_u:object_r:sysadm_cron_spool_t,s0) #/var/spool/cron/crontabs/root -- context_template(system_u:object_r:sysadm_cron_spool_t,s0)
/var/spool/fcron -d context_template(system_u:object_r:cron_spool_t,s0) /var/spool/fcron -d context_template(system_u:object_r:cron_spool_t,s0)
/var/spool/fcron/.* <<none>> /var/spool/fcron/.* <<none>>

6
refpolicy/policy/modules/services/cron.te
View File

@ -127,10 +127,8 @@ ifdef(`distro_redhat', `
') ')
') ')
ifdef(`targeted_policy', ` ifdef(`targeted_policy',`
term_dontaudit_use_unallocated_tty(crond_t) unconfined_domain_template(crond_t)
term_dontaudit_use_generic_pty(crond_t)
files_dontaudit_read_root_file(crond_t)
') ')
tunable_policy(`fcron_crond', ` tunable_policy(`fcron_crond', `