Skip to contentSkip to conversation

: patch to allow audit_control from the cron daemon

PATCH New Guido Trentalancia 1 participant 1 message Feb 16, 2011

lore
Share & tools
lore

Guido Trentalancia

author
#0 lore raw

PATCH 33/34 : patch to allow audit_control from the cron daemon

This patch has been added as needed after recent (> 02022011) changes affecting the cron module. Apparently the cron daemon needs audit_control permissions after such changes have been applied.

policy/modules/services/cron.te +1 -1
diff -pruN refpolicy-git-15022011-test/policy/modules/services/cron.te refpolicy-git-15022011-test-new/policy/modules/services/cron.te
@@ -136,7 +136,7 @@ tunable_policy(`fcron_crond', `
 # Cron daemon local policy
 #
 
-allow crond_t self:capability { dac_override setgid setuid sys_nice dac_read_search };
+allow crond_t self:capability { audit_control dac_override setgid setuid sys_nice dac_read_search };
 dontaudit crond_t self:capability { sys_resource sys_tty_config };
 allow crond_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap };
 allow crond_t self:process { setexec setfscreate };