From mboxrd@z Thu Jan  1 00:00:00 1970
From: jason@perfinion.com (Jason Zaman)
Date: Mon, 1 Feb 2016 17:19:02 +0800
Subject: [refpolicy] [PATCH] cron: Allow locks to be lnk_files
In-Reply-To: <20160131135336.GA11299@void.wireless.home.internal>
References: <1454177718-7999-1-git-send-email-jason@perfinion.com>
	<20160131135336.GA11299@void.wireless.home.internal>
Message-ID: <20160201091902.GA21978@meriadoc.perfinion.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Sun, Jan 31, 2016 at 02:53:37PM +0100, Dominick Grift wrote:
> On Sun, Jan 31, 2016 at 02:15:18AM +0800, Jason Zaman wrote:
> > -allow system_cronjob_t system_cronjob_lock_t:file manage_file_perms;
> > -files_lock_filetrans(system_cronjob_t, system_cronjob_lock_t, file)
> > +allow system_cronjob_t system_cronjob_lock_t:{ file lnk_file } manage_file_perms;
> 
> I prefer two lines for consistency:
> 
> allow system_cronjob_t system_cronjob_lock_t:file manage_file_perms;
> allow system_cronjob_t system_cronjob_lock_t:lnk_file manage_lnk_file_perms;

Fair enough, the manage_lnk_file_perms bit is better too. ive sent a new
version.

Thanks,
Jason