diff --git a/refpolicy/Makefile b/refpolicy/Makefile index a6ea9b7..27c0576 100644 --- a/refpolicy/Makefile +++ b/refpolicy/Makefile @@ -72,7 +72,7 @@ FLASKDIR = $(BASE_MODULE)/flask/ MISCDIR = $(BASE_MODULE)/misc/ DETECTED_DIRS := $(shell find $(wildcard *) -maxdepth 0 -type d) -ALL_MODULES := $(filter-out tmp appconfig,$(DETECTED_DIRS)) +ALL_MODULES := $(filter-out tmp appconfig CVS,$(DETECTED_DIRS)) PRE_TE_FILES := $(addprefix $(FLASKDIR),security_classes initial_sids access_vectors) ALL_INTERFACES := $(foreach dir,$(ALL_MODULES),$(wildcard $(dir)/*.if)) diff --git a/refpolicy/policy/modules/services/cron.te b/refpolicy/policy/modules/services/cron.te index 8c3e775..c8c904e 100644 --- a/refpolicy/policy/modules/services/cron.te +++ b/refpolicy/policy/modules/services/cron.te @@ -7,12 +7,12 @@ policy_module(consoletype, 1.0) # Declarations # -type anacron_exec_t; -files_make_file(anacron_exec_t) - # Allow system cron jobs to relabel filesystem for restoring file contexts. bool cron_can_relabel false; +type anacron_exec_t; +files_make_file(anacron_exec_t) + type cron_spool_t; files_make_file(cron_spool_t)