Rawhide Cant' update crontab using gnome-schedule.

[Dominick Grift]

On Fri, 2009-02-20 at 11:15 +0000, Frank Murphy wrote:
> Gnome-Schedule opens, but cannot update any tasks.
> ~/audit/.log
> doesn't show any specific denials.
> Hpappens as pure root, (sudo, su) user
> 
> sudo gnome-schedule
> Access denied by SELinux, must be privileged to use -u

Have the same issue. After semodule -DB, got these:

#============= chkpwd_t ==============
selinux_getattr_fs(chkpwd_t)
selinux_search_fs(chkpwd_t)
selinux_set_generic_booleans(chkpwd_t)

#============= crontab_t ==============
allow crontab_t chkpwd_t:process { siginh noatsecure rlimitinh };
allow crontab_t security_t:security compute_av;
selinux_getattr_fs(crontab_t)
selinux_set_generic_booleans(crontab_t)

#============= dgrift_sudo_t ==============
allow dgrift_sudo_t unconfined_t:process { siginh noatsecure
rlimitinh };
userdom_search_admin_dir(dgrift_sudo_t)

#============= dgrift_t ==============
allow dgrift_t dgrift_sudo_t:process { siginh noatsecure rlimitinh };

#============= semanage_t ==============
allow semanage_t setfiles_t:process { siginh noatsecure rlimitinh };

Will try to figure out which of these solves this issue.

> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list