diff --git a/refpolicy/policy/modules/services/cron.te b/refpolicy/policy/modules/services/cron.te index d806c5a..935f1ba 100644 --- a/refpolicy/policy/modules/services/cron.te +++ b/refpolicy/policy/modules/services/cron.te @@ -146,6 +146,14 @@ ifdef(`distro_redhat', ` ifdef(`targeted_policy',` unconfined_domain_template(crond_t) + + # cjp: fix this to generic_user interfaces + userdom_manage_user_home_subdirs(user,crond_t) + userdom_manage_user_home_subdir_files(user,crond_t) + userdom_manage_user_home_subdir_symlinks(user,crond_t) + userdom_manage_user_home_subdir_pipes(user,crond_t) + userdom_manage_user_home_subdir_sockets(user,crond_t) + userdom_create_user_home(user,crond_t,{ dir file lnk_file fifo_file sock_file }) ') tunable_policy(`fcron_crond', `