RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Interface to read cron_system_spool_t 

Useful for the case that manage isn't requied.

Signed-off-by: Dave Sugar <dsugar@tresys.com>
This commit is contained in:
David Sugar 2018-11-16 17:43:25 +00:00 committed by Chris PeBenito
parent 56e8f679b2
commit b73758bb97
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
policy/modules/services/cron.if
View File

@ -706,6 +706,26 @@ interface(`cron_manage_system_spool',`
manage_files_pattern($1, system_cron_spool_t, system_cron_spool_t) manage_files_pattern($1, system_cron_spool_t, system_cron_spool_t)
') ')
########################################
## <summary>
## Read the system spool.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`cron_read_system_spool',`
gen_require(`
type system_cron_spool_t;
')
cron_search_spool($1)
list_dirs_pattern($1, system_cron_spool_t, system_cron_spool_t)
read_files_pattern($1, system_cron_spool_t, system_cron_spool_t)
')
######################################## ########################################
## <summary> ## <summary>
## Read and write crond temporary files. ## Read and write crond temporary files.