34 lines
1.1 KiB
Plaintext
34 lines
1.1 KiB
Plaintext
#DESC crond
|
|
#
|
|
# Authors: Daniel Walsh <dwalsh@redhat.com>
|
|
#
|
|
|
|
#################################
|
|
#
|
|
# Rules for the crond domain.
|
|
#
|
|
# crond_exec_t is the type of the /usr/sbin/crond and other programs.
|
|
# This domain is defined just for targeted policy.
|
|
#
|
|
type crond_exec_t, file_type, sysadmfile, exec_type;
|
|
type crond_t, domain, privuser, privrole, privfd, privowner;
|
|
typealias crond_t alias system_crond_t;
|
|
type anacron_exec_t, file_type, sysadmfile, exec_type;
|
|
type system_crond_tmp_t, file_type, tmpfile, sysadmfile;
|
|
type system_cron_spool_t, file_type, sysadmfile;
|
|
type sysadm_cron_spool_t, file_type, sysadmfile;
|
|
role system_r types crond_t;
|
|
domain_auto_trans(initrc_t, crond_exec_t, crond_t)
|
|
domain_auto_trans(initrc_t, anacron_exec_t, crond_t)
|
|
# Access log files
|
|
file_type_auto_trans(crond_t, user_home_dir_t, user_home_t)
|
|
file_type_auto_trans(crond_t, tmp_t, system_crond_tmp_t)
|
|
var_run_domain(crond)
|
|
|
|
ifdef(`targeted_policy', `
|
|
unconfined_domain(crond_t)
|
|
allow crond_t initrc_t:dbus send_msg;
|
|
allow crond_t unconfined_t:dbus send_msg;
|
|
allow crond_t unconfined_t:process transition;
|
|
')
|