624abc4f54
When cron_userdomain_transition boolean is set to on, the user cronjobs
are supposed to run in their domains. Without this patch the default
context is not properly computed:
$ /usr/sbin/getdefaultcon user_u system_u:system_r:crond_t:s0
/usr/sbin/getdefaultcon: Invalid argument
$ /usr/sbin/getdefaultcon staff_u system_u:system_r:crond_t:s0
staff_u:sysadm_r:sysadm_t:s0
With this patch applied:
$ /usr/sbin/getdefaultcon user_u system_u:system_r:crond_t:s0
user_u:user_r:user_t:s0
$ /usr/sbin/getdefaultcon staff_ system_u:system_r:crond_t:s0
staff_u:staff_r:staff_t:s0
11 lines
452 B
Plaintext
11 lines
452 B
Plaintext
system_r:local_login_t:s0 staff_r:staff_t:s0 sysadm_r:sysadm_t:s0
|
|
system_r:remote_login_t:s0 staff_r:staff_t:s0
|
|
system_r:sshd_t:s0 staff_r:staff_t:s0 sysadm_r:sysadm_t:s0
|
|
system_r:crond_t:s0 staff_r:staff_t:s0 staff_r:cronjob_t:s0
|
|
system_r:xdm_t:s0 staff_r:staff_t:s0
|
|
staff_r:staff_su_t:s0 staff_r:staff_t:s0
|
|
staff_r:staff_sudo_t:s0 staff_r:staff_t:s0
|
|
sysadm_r:sysadm_su_t:s0 sysadm_r:sysadm_t:s0
|
|
sysadm_r:sysadm_sudo_t:s0 sysadm_r:sysadm_t:s0
|
|
|