Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-2.1 required=3.0 tests=DKIMWL_WL_HIGH,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, SPF_PASS autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 401F3C43387 for ; Mon, 14 Jan 2019 22:47:50 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id F1170205F4 for ; Mon, 14 Jan 2019 22:47:49 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (1024-bit key) header.d=ieee.org header.i=@ieee.org header.b="DSsRXGJF" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726684AbfANWrt (ORCPT ); Mon, 14 Jan 2019 17:47:49 -0500 Received: from mail-qk1-f193.google.com ([209.85.222.193]:45511 "EHLO mail-qk1-f193.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726618AbfANWrt (ORCPT ); Mon, 14 Jan 2019 17:47:49 -0500 Received: by mail-qk1-f193.google.com with SMTP id y78so463499qka.12 for ; Mon, 14 Jan 2019 14:47:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ieee.org; s=google; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=U8T2MppGb9rrHLIh/XlcQMeABzK/SeRnHRy1jwcT7aY=; b=DSsRXGJFn82b+PZKa7FhS8sPhZm3FhOTSpEQma1X+q1+XiVFJE7B5CIsdnZqPO+W41 60hvvz3IZkR49C7YvpivWMt8P4Mb2uZx9OT5ZalsxEI0k3lNMw7Ysm3MjTK7pEF7QVm3 T/ge05Ga0jFhk8Nz8lAQ0VC1mO5e30c7EtopM= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=U8T2MppGb9rrHLIh/XlcQMeABzK/SeRnHRy1jwcT7aY=; b=PyTjIFL89AyF80xyXdygvazjw7obmigt4+vD8Jakok7eVYp/Gz15Gc60LWstVFmmHs FL8ijmnjwebRurTZuX8cKWaRSzuWiZPNgZcqbJgKUf3qNfqN2C/48iVH+ndUTkZ+DNWj y6UzYwrSD3rLoWqsd1lbXuAOvSpUWA8r/O7AGqJiqy5sLvPmp6lZmxhi8kSd5kiAgODe oXGVxFHo/rnRZlnQYsnNfAU4O4O1XC/aOrX+i16Y/Jz8YmnWxVsXD/qU81ktrvq00fB+ Gd8kBidfUN5mDcKnCwgQ3m/iCviXlPdrlifZwxKxlEwepSM6bAA+0HjAn/OPLvLaP051 jPEA== X-Gm-Message-State: AJcUukdtbXU2XNJC5BmXFaqzDwcURtVH7DXJ9lc1JMos3HQjRNi2IZuW ssL947KMxnAZLN1bWeeNWDi4nCpdSY4= X-Google-Smtp-Source: ALg8bN5OzqP8xKhEHwd4Rl+wYZgrYpOwiF3XqvM+1nznqfbGiHD3Ydp1Pj4uxT5anJFD49zvUTR6zw== X-Received: by 2002:a37:5a05:: with SMTP id o5mr601651qkb.126.1547506068468; Mon, 14 Jan 2019 14:47:48 -0800 (PST) Received: from [192.168.1.190] (pool-108-15-23-247.bltmmd.fios.verizon.net. [108.15.23.247]) by smtp.gmail.com with ESMTPSA id y12sm58010185qta.13.2019.01.14.14.47.47 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 14 Jan 2019 14:47:47 -0800 (PST) Subject: Re: [PATCH] trivial system cronjob To: Russell Coker , "selinux-refpolicy@vger.kernel.org" References: <20190114113653.GA18228@xev> From: Chris PeBenito Message-ID: Date: Mon, 14 Jan 2019 17:43:39 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.3.0 MIME-Version: 1.0 In-Reply-To: <20190114113653.GA18228@xev> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit Sender: selinux-refpolicy-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: selinux-refpolicy@vger.kernel.org On 1/14/19 6:36 AM, Russell Coker wrote: > > Index: refpolicy-2.20180701/policy/modules/services/cron.te > =================================================================== > --- refpolicy-2.20180701.orig/policy/modules/services/cron.te > +++ refpolicy-2.20180701/policy/modules/services/cron.te > @@ -439,6 +439,7 @@ optional_policy(` > > optional_policy(` > init_dbus_chat(crond_t) > + init_dbus_chat(system_cronjob_t) > systemd_dbus_chat_logind(system_cronjob_t) > systemd_write_inherited_logind_sessions_pipes(system_cronjob_t) > # so cron jobs can restart daemons > @@ -518,6 +519,7 @@ corenet_udp_sendrecv_all_ports(system_cr > > dev_getattr_all_blk_files(system_cronjob_t) > dev_getattr_all_chr_files(system_cronjob_t) > +dev_getattr_mtrr_dev(system_cronjob_t) > dev_read_urand(system_cronjob_t) > dev_read_sysfs(system_cronjob_t) > # for checkarray to write to sync_action Merged. -- Chris PeBenito