[refpolicy] [PATCH 1/1] Cronjobs might create temporary directories
dominick.grift at gmail.com
Fri Sep 23 15:26:27 CDT 2011
On Fri, 2011-09-23 at 21:11 +0200, Sven Vermeulen wrote:
> On Thu, Sep 22, 2011 at 08:42:51PM +0200, Sven Vermeulen wrote:
> > If the system_cronjob_t domain is seen more like a "jump board" towards the
> > application specific domains, I don't mind creating a makewhatis policy
> > module and work from there onwards.
> Giving the fact that the policy will probably read and write man_t together
> with the usual suspects (_exec, _domtrans), is it okay to suggest a patch for
> the miscfiles module? Or would you rather see an independent module?
> I don't think I need to offer a _run or _role interface, since transitioning
> from sysadm_t wouldn't be necessary. Or is it better to do that anyway?
I wonder what PeBenito thinks about this.
I wouldnt mind adding this to miscfiles, but i wouldnt add any unused
interfaces. If it turns out they are needed they can always be added
> Sven Vermeulen
> refpolicy mailing list
> refpolicy at oss.tresys.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 836 bytes
Desc: This is a digitally signed message part
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20110923/46106723/attachment.bin
More information about the refpolicy