aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChris PeBenito <chpebeni@linux.microsoft.com>2024-02-23 16:06:03 -0500
committerKenton Groombridge <concord@gentoo.org>2024-05-14 13:40:50 -0400
commit39ffa538a206a67bdaa5afbd7af3457cdf7c23ee (patch)
tree5a37fd0aa7b014436dcac19fc99486f06faefffa /Vagrantfile
parentuml: Remove excessive access from user domains on uml_exec_t. (diff)
downloadhardened-refpolicy-39ffa538a206a67bdaa5afbd7af3457cdf7c23ee.tar.gz
hardened-refpolicy-39ffa538a206a67bdaa5afbd7af3457cdf7c23ee.tar.bz2
hardened-refpolicy-39ffa538a206a67bdaa5afbd7af3457cdf7c23ee.zip
cron: Use raw entrypoint rule for system_cronjob_t.
By using domain_entry_file() to provide the entrypoint permission, it makes the spool file an executable, with unexpected access. Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com> Signed-off-by: Kenton Groombridge <concord@gentoo.org>
Diffstat (limited to 'Vagrantfile')
0 files changed, 0 insertions, 0 deletions