summaryrefslogtreecommitdiffstats
path: root/recipes-security/refpolicy/refpolicy/0058-policy-modules-services-cron-allow-crond_t-to-search.patch
diff options
context:
space:
mode:
Diffstat (limited to 'recipes-security/refpolicy/refpolicy/0058-policy-modules-services-cron-allow-crond_t-to-search.patch')
-rw-r--r--recipes-security/refpolicy/refpolicy/0058-policy-modules-services-cron-allow-crond_t-to-search.patch34
1 files changed, 0 insertions, 34 deletions
diff --git a/recipes-security/refpolicy/refpolicy/0058-policy-modules-services-cron-allow-crond_t-to-search.patch b/recipes-security/refpolicy/refpolicy/0058-policy-modules-services-cron-allow-crond_t-to-search.patch
deleted file mode 100644
index b7e7c1d..0000000
--- a/recipes-security/refpolicy/refpolicy/0058-policy-modules-services-cron-allow-crond_t-to-search.patch
+++ /dev/null
@@ -1,34 +0,0 @@
1From e8ff96c9bb98305d1b50fccce67025df3ebbf184 Mon Sep 17 00:00:00 2001
2From: Yi Zhao <yi.zhao@windriver.com>
3Date: Thu, 23 May 2019 15:52:17 +0800
4Subject: [PATCH] policy/modules/services/cron: allow crond_t to search
5 logwatch_cache_t
6
7Fixes:
8avc: denied { search } for pid=234 comm="crond" name="logcheck"
9dev="vda" ino=29080 scontext=system_u:system_r:crond_t:s0-s15:c0.c1023
10tcontext=system_u:object_r:logwatch_cache_t:s0 tclass=dir permissive=0
11
12Upstream-Status: Inappropriate [embedded specific]
13
14Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
15---
16 policy/modules/services/cron.te | 2 ++
17 1 file changed, 2 insertions(+)
18
19diff --git a/policy/modules/services/cron.te b/policy/modules/services/cron.te
20index 2902820b0..36eb33060 100644
21--- a/policy/modules/services/cron.te
22+++ b/policy/modules/services/cron.te
23@@ -318,6 +318,8 @@ miscfiles_read_localization(crond_t)
24
25 userdom_list_user_home_dirs(crond_t)
26
27+logwatch_search_cache_dir(crond_t)
28+
29 tunable_policy(`cron_userdomain_transition',`
30 dontaudit crond_t cronjob_t:process transition;
31 dontaudit crond_t cronjob_t:fd use;
32--
332.17.1
34