[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/

[Sven Vermeulen]

commit:     ff9df3107bf73727c374843433256498fbdc408d
Author:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
AuthorDate: Thu Nov  1 21:27:55 2012 +0000
Commit:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
CommitDate: Thu Nov  1 21:27:55 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=ff9df310

Reshuffle gentoo specific cron changes

---
 policy/modules/contrib/cron.te |    7 +++++--
 1 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/policy/modules/contrib/cron.te b/policy/modules/contrib/cron.te
index 1776b24..f52462d 100644
--- a/policy/modules/contrib/cron.te
+++ b/policy/modules/contrib/cron.te
@@ -59,7 +59,6 @@ typealias cronjob_t alias { user_crond_t staff_crond_t sysadm_crond_t };
 typealias cronjob_t alias { auditadm_crond_t secadm_crond_t };
 domain_type(cronjob_t)
 domain_cron_exemption_target(cronjob_t)
-domain_interactive_fd(cronjob_t)
 corecmd_shell_entry_type(cronjob_t)
 ubac_constrained(cronjob_t)
 
@@ -102,7 +101,6 @@ type system_cronjob_t alias system_crond_t;
 init_daemon_domain(system_cronjob_t, anacron_exec_t)
 corecmd_shell_entry_type(system_cronjob_t)
 domain_entry_file(system_cronjob_t, system_cron_spool_t)
-domain_interactive_fd(system_cronjob_t)
 
 type system_cronjob_lock_t alias system_crond_lock_t;
 files_lock_file(system_cronjob_lock_t)
@@ -123,6 +121,11 @@ files_type(user_cron_spool_t)
 ubac_constrained(user_cron_spool_t)
 mta_system_content(user_cron_spool_t)
 
+ifdef(`distro_gentoo',`
+	domain_interactive_fd(cronjob_t)
+	domain_interactive_fd(system_cronjob_t)
+')
+
 ifdef(`enable_mcs',`
 	init_ranged_daemon_domain(crond_t, crond_exec_t, s0 - mcs_systemhigh)
 ')