From: dominick.grift@gmail.com (Dominick Grift)
Date: Tue, 19 Nov 2013 09:44:49 +0100
Subject: [refpolicy] [PATCH] Label /etc/cron.daily/logrotate correctly.
In-Reply-To: <20131118201125.2cb765ac@gentp.lnet>
References: <1384692787-9565-1-git-send-email-aranea@aixah.de>
	<20131118201125.2cb765ac@gentp.lnet>
Message-ID: <1384850689.3080.8.camel@d30>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Mon, 2013-11-18 at 20:11 +0100, Luis Ressel wrote:
> For this to work, can_exec(logrotate_t, logrotate_exec_t) is also
> required.
> 

Thanks, applied

> Btw: "allow logrotate_t self:process ~{ ptrace setcurrent setexec
> setrlimit execmem execstack execheap };" (currently in
> contrib/logrotate.te) sounds a bit much to me...
> _______________________________________________
> refpolicy mailing list
> refpolicy at oss.tresys.com
> http://oss.tresys.com/mailman/listinfo/refpolicy