Skip to contentSkip to conversation

: patch to allow the cron module to manage job keys

PATCH New Guido Trentalancia 1 participant 2 messages Feb 16, 2011 – Feb 18, 2011

lore
Share & tools
lore

Guido Trentalancia

author
#0 lore raw

PATCH 30/34 : patch to allow the cron module to manage job keys

This patch has been added as needed after recent (> 02022011) changes affecting the cron module.

policy/modules/services/cron.if +18 -0
diff -pruN refpolicy-git-15022011-test-apply/policy/modules/services/cron.if refpolicy-git-15022011-new-modified/policy/modules/services/cron.if
@@ -523,6 +523,24 @@ interface(`cron_use_system_job_fds',`
 
 ########################################
 ## <summary>
+##      Manage a system cron job key.
+## </summary>
+## <param name="domain">
+##      <summary>
+##      Domain allowed access.
+##      </summary>
+## </param>
+#
+interface(`cron_manage_system_job_key',`
+	gen_require(`
+		type system_cronjob_t;
+	')
+
+	allow $1 system_cronjob_t:key manage_key_perms;
+')
+
+########################################
+## <summary>
 ##	Write a system cron job unnamed pipe.
 ## </summary>
 ## <param name="domain">
policy/modules/services/cron.te +2 -0
diff -pruN refpolicy-git-15022011-test-apply/policy/modules/services/cron.te refpolicy-git-15022011-new-modified/policy/modules/services/cron.te
@@ -203,6 +203,8 @@ files_list_usr(crond_t)
 files_search_var_lib(crond_t)
 files_search_default(crond_t)
 
+cron_manage_system_job_key(crond_t)
+
 init_rw_utmp(crond_t)
 init_spec_domtrans_script(crond_t)
author
#1 lore raw

PATCH 30/34 : patch to allow the cron module to manage job keys

Hello !

The three patches for cron ([30/34], [33/34] and [34/34]) should be just dropped.

I realised that no changes have been made to the cron module recently, I am not using a very generic cron version and I have not had enough time to check this more carefully.

It might even be due in part to a local cron misconfiguration.

So, please just do not consider the above mentioned three patches for cron.

Thanks very much.

Guido

Quoted 50 lines · Guido Trentalancia

This patch has been added as needed after recent (> 02022011) changes affecting the cron module.

diff -pruN refpolicy-git-15022011-test-apply/policy/modules/services/cron.if refpolicy-git-15022011-new-modified/policy/modules/services/cron.if

policy/modules/services/cron.if +18 -0
@@ -523,6 +523,24 @@ interface(`cron_use_system_job_fds',`
 
 ########################################
 ## <summary>
+##      Manage a system cron job key.
+## </summary>
+## <param name="domain">
+##      <summary>
+##      Domain allowed access.
+##      </summary>
+## </param>
+#
+interface(`cron_manage_system_job_key',`
+	gen_require(`
+		type system_cronjob_t;
+	')
+
+	allow $1 system_cronjob_t:key manage_key_perms;
+')
+
+########################################
+## <summary>
 ##	Write a system cron job unnamed pipe.
 ## </summary>
 ## <param name="domain">

diff -pruN refpolicy-git-15022011-test-apply/policy/modules/services/cron.te refpolicy-git-15022011-new-modified/policy/modules/services/cron.te

policy/modules/services/cron.te +2 -0
@@ -203,6 +203,8 @@ files_list_usr(crond_t)
 files_search_var_lib(crond_t)
 files_search_default(crond_t)
 
+cron_manage_system_job_key(crond_t)
+
 init_rw_utmp(crond_t)
 init_spec_domtrans_script(crond_t)

_______________________________________________
refpolicy mailing list
refpolicy at oss.tresys.com
http://oss.tresys.com/mailman/listinfo/refpolicy