From 74d920c3b50aac71b689e6d55a175901a3f604b0 Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Dec 06 2007 14:35:44 +0000
Subject: trunk: add setrlimit to debian cron.


---

diff --git a/policy/modules/services/cron.te b/policy/modules/services/cron.te
index d9d0633..bd8f06a 100644
--- a/policy/modules/services/cron.te
+++ b/policy/modules/services/cron.te
@@ -1,5 +1,5 @@
 
-policy_module(cron,1.8.2)
+policy_module(cron,1.8.3)
 
 gen_require(`
 	class passwd rootok;
@@ -163,6 +163,9 @@ userdom_list_all_users_home_dirs(crond_t)
 mta_send_mail(crond_t)
 
 ifdef(`distro_debian',`
+	# pam_limits is used
+	allow crond_t self:process setrlimit;
+
 	optional_policy(`
 		# Debian logcheck has the home dir set to its cache
 		logwatch_search_cache_dir(crond_t)