diff --git a/policy/modules/admin/tmpreaper.te b/policy/modules/admin/tmpreaper.te index 069f2a9..eae4b44 100644 --- a/policy/modules/admin/tmpreaper.te +++ b/policy/modules/admin/tmpreaper.te @@ -1,5 +1,5 @@ -policy_module(tmpreaper, 1.3.0) +policy_module(tmpreaper, 1.3.1) ######################################## # @@ -28,6 +28,8 @@ files_read_var_lib_files(tmpreaper_t) files_purge_tmp(tmpreaper_t) # why does it need setattr? files_setattr_all_tmp_dirs(tmpreaper_t) +files_getattr_all_dirs(tmpreaper_t) +files_getattr_all_files(tmpreaper_t) mls_file_read_all_levels(tmpreaper_t) mls_file_write_all_levels(tmpreaper_t) @@ -39,6 +41,24 @@ miscfiles_delete_man_pages(tmpreaper_t) cron_system_entry(tmpreaper_t, tmpreaper_exec_t) +ifdef(`distro_redhat',` + userdom_delete_user_home_content_dirs(tmpreaper_t) + userdom_delete_user_home_content_files(tmpreaper_t) + userdom_delete_user_home_content_symlinks(tmpreaper_t) +') + +optional_policy(` + amavis_manage_spool_files(tmpreaper_t) +') + +optional_policy(` + kismet_manage_log(tmpreaper_t) +') + optional_policy(` lpd_manage_spool(tmpreaper_t) ') + +optional_policy(` + unconfined_domain(tmpreaper_t) +')