Re: How to fix cron Fedora 18

[Dominick Grift]

On Fri, 2013-05-24 at 08:28 +0100, Frank Murphy wrote:
>  The following showing up fron one box.
>  The box is enforcing, system-config-selinux shows as such.
>  What do I need to fix, or is cron meant to be permissive.? 
As for the "is cron meant to be permissive" question:

# seinfo --permissive

Permissive Types: 14
   openvswitch_t
   systemd_localed_t
   virt_qemu_ga_t
   pkcsslotd_t
   realmd_t
   isnsd_t
   mandb_t
   rngd_t
   slpd_t
   smsd_t
   glusterd_t
   stapserver_t
   systemd_hostnamed_t
   sensord_t

The answer, i guess, is: no cron should not be permissive

As for what do i need to fix it, i am not sure.

Could you grep -i selinux_err /var/log/audit/audit.log?

>  
>  
>  --------------------- Cron Begin ------------------------ 
>  
>   
>   **Unmatched Entries**
>   NULL security context for user, but SELinux in permissive mode,
>  continuing () Unauthorized SELinux
>  context=unconfined_u:unconfined_r:unconfined_t:s0
>  file_context=unconfined_u:object_r:user_cron_spool_t:s0
>  (/var/spool/cron/root) SELinux in permissive mode, continuing
>  (/var/spool/cron/root) Unauthorized SELinux
>  context=unconfined_u:unconfined_r:unconfined_t:s0
>  file_context=unconfined_u:object_r:user_cron_spool_t:s0
>  (/var/spool/cron/root) SELinux in permissive mode, continuing
>  (/var/spool/cron/root) NULL security context for user, but SELinux in
>  permissive mode, continuing () NULL security context for user, but
>  SELinux in permissive mode, continuing () NULL security context for
>  user, but SELinux in permissive mode, continuing () NULL security
>  context for user, but SELinux in permissive mode, continuing ()
>  ---------------------- Cron End ------------------------- 
>