[refpolicy] [PATCH 1/1] Cronjobs might create temporary directories

Sven Vermeulen sven.vermeulen at siphos.be
Fri Sep 23 14:11:54 CDT 2011


On Thu, Sep 22, 2011 at 08:42:51PM +0200, Sven Vermeulen wrote:
> If the system_cronjob_t domain is seen more like a "jump board" towards the
> application specific domains, I don't mind creating a makewhatis policy
> module and work from there onwards.

Giving the fact that the policy will probably read and write man_t together
with the usual suspects (_exec, _domtrans), is it okay to suggest a patch for
the miscfiles module? Or would you rather see an independent module?

I don't think I need to offer a _run or _role interface, since transitioning
from sysadm_t wouldn't be necessary. Or is it better to do that anyway?

Wkr,	
	Sven Vermeulen


More information about the refpolicy mailing list