[policy-sources-1.8-10] tmpwatch ACLs.

[Aleksey Nogin <aleksey@xxxxxxxxx>]

audit(1079205620.091:0): avc:  denied  { getattr } for  pid=4269 
exe=/usr/sbin/tmpwatch path=/tmp/foo dev=hda2 ino=212920 
scontext=system_u:system_r:tmpreaper_t tcontext=system_u:object_r:file_t 
tclass=file
audit(1079205620.271:0): avc:  denied  { unlink } for  pid=4269 
exe=/usr/sbin/tmpwatch name=before.new dev=hda2 ino=1357435 
scontext=system_u:system_r:tmpreaper_t tcontext=system_u:object_r:file_t 
tclass=file

--
Aleksey Nogin

Home Page: http://nogin.org/
E-Mail: nogin@xxxxxxxxxxxxxx (office), aleksey@xxxxxxxxx (personal)
Office: Jorgensen 70, tel: (626) 395-2907