diff --git a/refpolicy/policy/modules/services/cron.if b/refpolicy/policy/modules/services/cron.if index 6226fc0..c0558b6 100644 --- a/refpolicy/policy/modules/services/cron.if +++ b/refpolicy/policy/modules/services/cron.if @@ -434,7 +434,7 @@ interface(`cron_rw_pipes',` ######################################## ## -## Create, read, and write a cron daemon TCP socket. +## Read, and write cron daemon TCP sockets. ## ## ## @@ -442,13 +442,12 @@ interface(`cron_rw_pipes',` ## ## # -# cjp: need to fix this name -interface(`cron_crw_tcp_socket',` +interface(`cron_rw_tcp_sockets',` gen_require(` type crond_t; ') - allow $1 crond_t:tcp_socket { create read write }; + allow $1 crond_t:tcp_socket { read write }; ') ######################################## diff --git a/refpolicy/policy/modules/services/mta.te b/refpolicy/policy/modules/services/mta.te index 11a75c3..39cc1fb 100644 --- a/refpolicy/policy/modules/services/mta.te +++ b/refpolicy/policy/modules/services/mta.te @@ -157,7 +157,7 @@ optional_policy(`postfix',` ') optional_policy(`cron',` - cron_crw_tcp_socket(system_mail_t) + cron_rw_tcp_sockets(system_mail_t) ') ')