commit: 6f1b709ddb3b5e9d71ed8195849d9feb1752f9f4 Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be> AuthorDate: Tue Nov 11 13:35:45 2014 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Tue Nov 11 13:35:45 2014 +0000 URL: http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=6f1b709d
Crontab fix for munin (workaround) is in policy --- man/man8/cron_selinux.8 | 2 +- man/man8/munin_selinux.8 | 2 +- policy/modules/contrib/cron.rst | 2 +- policy/modules/contrib/munin.rst | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/man/man8/cron_selinux.8 b/man/man8/cron_selinux.8 index c3dd184..5444953 100644 --- a/man/man8/cron_selinux.8 +++ b/man/man8/cron_selinux.8 @@ -321,7 +321,7 @@ cronjobs inside \fB/var/spool/cron/crontabs\fP\&. The munin cronjobs are meant t be executed as the munin Linux account, but the jobs themselves are best seen as system cronjobs (as they are not related to a true interactive end user). .sp -The default deployed files do not get the \fIsystem_u\fP SELinux ownership +The default deployed files might not get the \fIsystem_u\fP SELinux ownership assigned. To fix this, execute the following command: .INDENT 0.0 .INDENT 3.5 diff --git a/man/man8/munin_selinux.8 b/man/man8/munin_selinux.8 index 99507b6..29eb7aa 100644 --- a/man/man8/munin_selinux.8 +++ b/man/man8/munin_selinux.8 @@ -149,7 +149,7 @@ cronjobs inside \fB/var/spool/cron/crontabs\fP\&. The munin cronjobs are meant t be executed as the munin Linux account, but the jobs themselves are best seen as system cronjobs (as they are not related to a true interactive end user). .sp -The default deployed files do not get the \fIsystem_u\fP SELinux ownership +The default deployed files might not get the \fIsystem_u\fP SELinux ownership assigned. To fix this, execute the following command: .INDENT 0.0 .INDENT 3.5 diff --git a/policy/modules/contrib/cron.rst b/policy/modules/contrib/cron.rst index caf0977..a35c26a 100644 --- a/policy/modules/contrib/cron.rst +++ b/policy/modules/contrib/cron.rst @@ -268,7 +268,7 @@ cronjobs inside ``/var/spool/cron/crontabs``. The munin cronjobs are meant to be executed as the munin Linux account, but the jobs themselves are best seen as system cronjobs (as they are not related to a true interactive end user). -The default deployed files do not get the *system_u* SELinux ownership +The default deployed files might not get the *system_u* SELinux ownership assigned. To fix this, execute the following command:: ~# chcon -u system_u /var/spool/cron/crontabs/munin diff --git a/policy/modules/contrib/munin.rst b/policy/modules/contrib/munin.rst index 3819024..220c75e 100644 --- a/policy/modules/contrib/munin.rst +++ b/policy/modules/contrib/munin.rst @@ -115,7 +115,7 @@ cronjobs inside ``/var/spool/cron/crontabs``. The munin cronjobs are meant to be executed as the munin Linux account, but the jobs themselves are best seen as system cronjobs (as they are not related to a true interactive end user). -The default deployed files do not get the *system_u* SELinux ownership +The default deployed files might not get the *system_u* SELinux ownership assigned. To fix this, execute the following command:: ~# chcon -u system_u /var/spool/cron/crontabs/munin
