Why does cron_system_entry() lack an allow entrypoint?

"George " <[email protected]>
Newsgroups gmane.linux.redhat.fedora.selinux
Message-ID <[email protected]>
Hi all, first message for the new year. Best wishes for everyone in 2019.

As per title, the interface doesn't have an allow: entrypoint when it's intended to be used to transition cron to the target domain. Instead I need to manually allow it in my local policy.

Specifically looking at system cron jobs: system_cronjob_t.

I'm just wondering why it's not included when there's already the needed exec and type transition allow.

If someone more knowledgeable can shed some light that would be appreciated.

Cheers.
_______________________________________________
selinux mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.