RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Allow cron to execute portage commands 

Many users use portage from within cron (for instance to update the
portage tree or even automatically update their system). As such, we
allow to run portage from the (system) cronjob domains.

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
This commit is contained in:
Sven Vermeulen 2011-09-03 16:23:28 +02:00 committed by Chris PeBenito
parent 49f1631fc0
commit 9bcb813b57
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
policy/modules/admin/portage.te
View File

@ -197,6 +197,11 @@ optional_policy(`
bootloader_domtrans(portage_t) bootloader_domtrans(portage_t)
') ')
optional_policy(`
cron_system_entry(portage_t, portage_exec_t)
cron_system_entry(portage_fetch_t, portage_fetch_exec_t)
')
optional_policy(` optional_policy(`
modutils_domtrans_depmod(portage_t) modutils_domtrans_depmod(portage_t)
modutils_domtrans_update_mods(portage_t) modutils_domtrans_update_mods(portage_t)