cron: Remove too greedy file context grab

This regexp will match lots of unintended files, for example things created by tempfile patterns (could include "cron"), and also things inside subdirectories. It feels like a better approach would be to find actual directories used, or at the very least to limit it to files directly under /run. Signed-off-by: Henrik Grindal Bakken <[email protected]>
SELinuxProject · Oct 15, 2024 · e62996c · e62996c
1 parent 3d0b229
commit e62996c
Showing 1 changed file with 0 additions and 1 deletion.
diff --git a/policy/modules/services/cron.fc b/policy/modules/services/cron.fc
@@ -35,7 +35,6 @@
 /run/cron(d)?\.reboot	--	gen_context(system_u:object_r:crond_runtime_t,s0)
 /run/fcron\.fifo	-s	gen_context(system_u:object_r:crond_runtime_t,s0)
 /run/fcron\.pid	--	gen_context(system_u:object_r:crond_runtime_t,s0)
-/run/.*cron.*	--	gen_context(system_u:object_r:crond_runtime_t,s0)
 
 /var/spool/anacron(/.*)?	gen_context(system_u:object_r:system_cron_spool_t,s0)
 /var/spool/at(/.*)?	gen_context(system_u:object_r:user_cron_spool_t,s0)