It appeary running the tmpwatch from the cron.daily location isn't
possible: the way cron/anacron is running things appears to break
SELinux context at some point, leading to SELinux denials caused by a
weird need for dac_override.
In order to NOT allow this dac_override (security hazard), and after
extensive testing, it seems it's better to push the job directly in
(cherry picked from commit