nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Interface to read cron_system_spool_t

Browse Source 
Useful for the case that manage isn't requied.

Signed-off-by: Dave Sugar <dsugar@tresys.com>
This commit is contained in:
David Sugar 2018-11-16 17:43:25 +00:00 committed by Chris PeBenito
parent 56e8f679b2
commit b73758bb97
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
policy/modules/services/cron.if
View File

@ -706,6 +706,26 @@ interface(`cron_manage_system_spool',`
manage_files_pattern($1, system_cron_spool_t, system_cron_spool_t)
')
########################################
## <summary>
## Read the system spool.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`cron_read_system_spool',`
gen_require(`
type system_cron_spool_t;
')
cron_search_spool($1)
list_dirs_pattern($1, system_cron_spool_t, system_cron_spool_t)
read_files_pattern($1, system_cron_spool_t, system_cron_spool_t)
')
########################################
## <summary>
## Read and write crond temporary files.