From owner-p4-projects@FreeBSD.ORG  Mon Jan 22 20:08:25 2007
Return-Path: <owner-p4-projects@FreeBSD.ORG>
X-Original-To: p4-projects@freebsd.org
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
	id 55D2716A51B; Mon, 22 Jan 2007 20:08:25 +0000 (UTC)
X-Original-To: perforce@freebsd.org
Delivered-To: perforce@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 1BB7D16A519
	for <perforce@freebsd.org>; Mon, 22 Jan 2007 20:08:25 +0000 (UTC)
	(envelope-from millert@freebsd.org)
Received: from repoman.freebsd.org (repoman.freebsd.org [69.147.83.41])
	by mx1.freebsd.org (Postfix) with ESMTP id 0B3F413C471
	for <perforce@freebsd.org>; Mon, 22 Jan 2007 20:08:25 +0000 (UTC)
	(envelope-from millert@freebsd.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.13.6/8.13.6) with ESMTP id l0MK8OXC090152
	for <perforce@freebsd.org>; Mon, 22 Jan 2007 20:08:24 GMT
	(envelope-from millert@freebsd.org)
Received: (from perforce@localhost)
	by repoman.freebsd.org (8.13.6/8.13.4/Submit) id l0MK8Ou7090148
	for perforce@freebsd.org; Mon, 22 Jan 2007 20:08:24 GMT
	(envelope-from millert@freebsd.org)
Date: Mon, 22 Jan 2007 20:08:24 GMT
Message-Id: <200701222008.l0MK8Ou7090148@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
	millert@freebsd.org using -f
From: Todd Miller <millert@FreeBSD.org>
To: Perforce Change Reviews <perforce@freebsd.org>
Cc: 
Subject: PERFORCE change 113416 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: p4 projects tree changes <p4-projects.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/p4-projects>,
	<mailto:p4-projects-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/p4-projects>
List-Post: <mailto:p4-projects@freebsd.org>
List-Help: <mailto:p4-projects-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/p4-projects>,
	<mailto:p4-projects-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Jan 2007 20:08:25 -0000

http://perforce.freebsd.org/chv.cgi?CH=113416

Change 113416 by millert@millert_macbook on 2007/01/22 20:08:07

	Fix cron and at paths.

Affected files ...

.. //depot/projects/trustedbsd/sedarwin8/policies/sedarwin/refpolicy/policy/modules/services/cron.fc#6 edit

Differences ...

==== //depot/projects/trustedbsd/sedarwin8/policies/sedarwin/refpolicy/policy/modules/services/cron.fc#6 (text+ko) ====

@@ -3,13 +3,13 @@
 /etc/crontab			--	gen_context(system_u:object_r:system_cron_spool_t,s0)
 
 /usr/bin/at			--	gen_context(system_u:object_r:crontab_exec_t,s0)
+/usr/bin/atq			--	gen_context(system_u:object_r:crontab_exec_t,s0)
+/usr/bin/atrm			--	gen_context(system_u:object_r:crontab_exec_t,s0)
+/usr/bin/batch			--	gen_context(system_u:object_r:crontab_exec_t,s0)
 /usr/bin/(f)?crontab		--	gen_context(system_u:object_r:crontab_exec_t,s0)
 
 /usr/sbin/anacron		--	gen_context(system_u:object_r:anacron_exec_t,s0)
 /usr/sbin/atd			--	gen_context(system_u:object_r:crond_exec_t,s0)
-/usr/sbin/atq			--	gen_context(system_u:object_r:crond_exec_t,s0)
-/usr/sbin/atrm			--	gen_context(system_u:object_r:crond_exec_t,s0)
-/usr/sbin/batch			--	gen_context(system_u:object_r:crond_exec_t,s0)
 /usr/sbin/cron(d)?		--	gen_context(system_u:object_r:crond_exec_t,s0)
 /usr/sbin/fcron			--	gen_context(system_u:object_r:crond_exec_t,s0)
 
@@ -21,17 +21,15 @@
 /var/run/fcron\.pid		--	gen_context(system_u:object_r:crond_var_run_t,s0)
 /private/var/run/cron.pid	--	gen_context(system_u:object_r:crond_var_run_t,s0)
 
-/var/spool/at			-d	gen_context(system_u:object_r:cron_spool_t,s0)
-/var/spool/at/spool		-d	gen_context(system_u:object_r:cron_spool_t,s0)
-/var/spool/at/[^/]*		--	<<none>>
+/var/at				-d	gen_context(system_u:object_r:cron_spool_t,s0)
+/var/at/jobs			-d	gen_context(system_u:object_r:cron_spool_t,s0)
+/var/at/spool			-d	gen_context(system_u:object_r:cron_spool_t,s0)
+/var/at/[^/]*			--	<<none>>
 
-/var/spool/cron			-d	gen_context(system_u:object_r:cron_spool_t,s0)
-#/var/spool/cron/root		--	gen_context(system_u:object_r:sysadm_cron_spool_t,s0)
-/var/spool/cron/[^/]*		--	<<none>>
-
-/var/spool/cron/crontabs 	-d	gen_context(system_u:object_r:cron_spool_t,s0)
-/var/spool/cron/crontabs/.*	--	<<none>>
-#/var/spool/cron/crontabs/root	--	gen_context(system_u:object_r:sysadm_cron_spool_t,s0)
+/var/cron			-d	gen_context(system_u:object_r:cron_spool_t,s0)
+/var/cron/tabs			-d	gen_context(system_u:object_r:cron_spool_t,s0)
+#/var/cron/tabs/root		--	gen_context(system_u:object_r:sysadm_cron_spool_t,s0)
+/var/cron/tabs/[^/]*		--	<<none>>
 
 /var/spool/fcron		-d	gen_context(system_u:object_r:cron_spool_t,s0)
 /var/spool/fcron/.*			<<none>>