Changeset 2739

Show
Ignore:
Timestamp:
06/25/08 14:41:32 (2 months ago)
Author:
cpebenito
Message:

rbacsep: change crontab to run helper apps in the same domain rather than the user domain.

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved
  • branches/rbacsep/policy/modules/services/cron.if

    r2727 r2739  
    118118 
    119119        # Run helper programs as the user domain 
    120         corecmd_bin_domtrans(crontab_t, $2) 
    121         corecmd_shell_domtrans(crontab_t, $2) 
     120        #corecmd_bin_domtrans(crontab_t, $2) 
     121        #corecmd_shell_domtrans(crontab_t, $2) 
     122        corecmd_exec_bin(crontab_t) 
     123        corecmd_exec_shell(crontab_t) 
    122124 
    123125        optional_policy(` 
     
    158160 
    159161        # Run helper programs as the user domain 
    160         corecmd_bin_domtrans(crontab_t, $2) 
    161         corecmd_shell_domtrans(crontab_t, $2) 
     162        #corecmd_bin_domtrans(crontab_t, $2) 
     163        #corecmd_shell_domtrans(crontab_t, $2) 
     164        corecmd_exec_bin(crontab_t) 
     165        corecmd_exec_shell(crontab_t) 
    162166 
    163167        optional_policy(` 
     
    204208 
    205209        # Run helper programs as the user domain 
    206         corecmd_bin_domtrans(admin_crontab_t, $2) 
    207         corecmd_shell_domtrans(admin_crontab_t, $2) 
     210        #corecmd_bin_domtrans(admin_crontab_t, $2) 
     211        #corecmd_shell_domtrans(admin_crontab_t, $2) 
     212        corecmd_exec_bin(admin_crontab_t) 
     213        corecmd_exec_shell(admin_crontab_t) 
    208214 
    209215        optional_policy(`