Move sock_file filetrans to fcron_crond conditional.

Also drop the name in the filetrans.
wtogami · Apr 24, 2014 · de1bc11 · de1bc11
1 parent 8a2ff99
commit de1bc11
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cron.te b/cron.te
@@ -232,7 +232,6 @@ logging_log_filetrans(crond_t, cron_log_t, file)
 
 manage_files_pattern(crond_t, crond_var_run_t, crond_var_run_t)
 files_pid_filetrans(crond_t, crond_var_run_t, file)
-files_pid_filetrans(crond_t, crond_var_run_t, sock_file, "fcron.fifo")
 
 manage_files_pattern(crond_t, cron_spool_t, cron_spool_t)
 
@@ -349,6 +348,7 @@ tunable_policy(`allow_polyinstantiation',`
 tunable_policy(`fcron_crond',`
 	allow crond_t { system_cron_spool_t user_cron_spool_t }:file manage_file_perms;
 	allow crond_t crond_var_run_t:sock_file manage_sock_file_perms;
+	files_pid_filetrans(crond_t, crond_var_run_t, sock_file)
 ')
 
 optional_policy(`