Browse Source
It appeary running the tmpwatch from the cron.daily location isn't possible: the way cron/anacron is running things appears to break SELinux context at some point, leading to SELinux denials caused by a weird need for dac_override. In order to NOT allow this dac_override (security hazard), and after extensive testing, it seems it's better to push the job directly in root's crontab. Change-Id: Ib7e1d47fe7cffa2bd2ed1d72d94e4f380162f10a Closes-Bug: #1922002 Resolves: rhbz#1944466changes/08/784008/1
1 changed files with 30 additions and 15 deletions
Loading…
Reference in new issue