{"action":"closed","issue":{"url":"https://api.github.com/repos/TresysTechnology/clip/issues/195","labels_url":"https://api.github.com/repos/TresysTechnology/clip/issues/195/labels{/name}","comments_url":"https://api.github.com/repos/TresysTechnology/clip/issues/195/comments","events_url":"https://api.github.com/repos/TresysTechnology/clip/issues/195/events","html_url":"https://github.com/TresysTechnology/clip/issues/195","id":98633188,"number":195,"title":"Write policy for starting/stopping/restarting crond","user":{"login":"ykhodorkovskiy","id":3766888,"avatar_url":"https://avatars.githubusercontent.com/u/3766888?v=3","gravatar_id":"","url":"https://api.github.com/users/ykhodorkovskiy","html_url":"https://github.com/ykhodorkovskiy","followers_url":"https://api.github.com/users/ykhodorkovskiy/followers","following_url":"https://api.github.com/users/ykhodorkovskiy/following{/other_user}","gists_url":"https://api.github.com/users/ykhodorkovskiy/gists{/gist_id}","starred_url":"https://api.github.com/users/ykhodorkovskiy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ykhodorkovskiy/subscriptions","organizations_url":"https://api.github.com/users/ykhodorkovskiy/orgs","repos_url":"https://api.github.com/users/ykhodorkovskiy/repos","events_url":"https://api.github.com/users/ykhodorkovskiy/events{/privacy}","received_events_url":"https://api.github.com/users/ykhodorkovskiy/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/TresysTechnology/clip/labels/Code%20Review","name":"Code Review","color":"0052cc"},{"url":"https://api.github.com/repos/TresysTechnology/clip/labels/High%20Priority","name":"High Priority","color":"fbca04"},{"url":"https://api.github.com/repos/TresysTechnology/clip/labels/selinux","name":"selinux","color":"bfdadc"}],"state":"closed","locked":false,"assignee":{"login":"ykhodorkovskiy","id":3766888,"avatar_url":"https://avatars.githubusercontent.com/u/3766888?v=3","gravatar_id":"","url":"https://api.github.com/users/ykhodorkovskiy","html_url":"https://github.com/ykhodorkovskiy","followers_url":"https://api.github.com/users/ykhodorkovskiy/followers","following_url":"https://api.github.com/users/ykhodorkovskiy/following{/other_user}","gists_url":"https://api.github.com/users/ykhodorkovskiy/gists{/gist_id}","starred_url":"https://api.github.com/users/ykhodorkovskiy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ykhodorkovskiy/subscriptions","organizations_url":"https://api.github.com/users/ykhodorkovskiy/orgs","repos_url":"https://api.github.com/users/ykhodorkovskiy/repos","events_url":"https://api.github.com/users/ykhodorkovskiy/events{/privacy}","received_events_url":"https://api.github.com/users/ykhodorkovskiy/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/TresysTechnology/clip/milestones/8","html_url":"https://github.com/TresysTechnology/clip/milestones/RHEL_7-Beta","labels_url":"https://api.github.com/repos/TresysTechnology/clip/milestones/8/labels","id":1087958,"number":8,"title":"RHEL_7-Beta","description":"SELinux policy for CLIP unrelated to booting. This is including but not limited to, AIDE and SSG policy.","creator":{"login":"ykhodorkovskiy","id":3766888,"avatar_url":"https://avatars.githubusercontent.com/u/3766888?v=3","gravatar_id":"","url":"https://api.github.com/users/ykhodorkovskiy","html_url":"https://github.com/ykhodorkovskiy","followers_url":"https://api.github.com/users/ykhodorkovskiy/followers","following_url":"https://api.github.com/users/ykhodorkovskiy/following{/other_user}","gists_url":"https://api.github.com/users/ykhodorkovskiy/gists{/gist_id}","starred_url":"https://api.github.com/users/ykhodorkovskiy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ykhodorkovskiy/subscriptions","organizations_url":"https://api.github.com/users/ykhodorkovskiy/orgs","repos_url":"https://api.github.com/users/ykhodorkovskiy/repos","events_url":"https://api.github.com/users/ykhodorkovskiy/events{/privacy}","received_events_url":"https://api.github.com/users/ykhodorkovskiy/received_events","type":"User","site_admin":false},"open_issues":18,"closed_issues":27,"state":"open","created_at":"2015-04-28T18:04:31Z","updated_at":"2015-09-02T20:28:38Z","due_on":"2015-09-30T04:00:00Z","closed_at":null},"comments":2,"created_at":"2015-08-02T20:02:43Z","updated_at":"2015-09-02T20:28:38Z","closed_at":"2015-09-02T20:28:38Z","body":"```\r\ntype=USER_AVC msg=audit(1438549098.961:1956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  denied  { start } for auid=1000 uid=0 gid=0 path=\"/usr/lib/systemd/system/crond.service\" cmdline=\"systemctl start crond.service\" scontext=toor_u:toor_r:toor_t:s0 tcontext=system_u:object_r:systemd_unit_file_t:s0 tclass=service  exe=\"/usr/lib/systemd/systemd\" sauid=0 hostname=? addr=? terminal=?'\r\ntype=AVC msg=audit(1438549099.271:1958): avc:  denied  { rlimitinh } for  pid=14297 comm=\"crond\" scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=process\r\ntype=AVC msg=audit(1438549099.271:1958): avc:  denied  { siginh } for  pid=14297 comm=\"crond\" scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=process\r\ntype=AVC msg=audit(1438549099.271:1958): avc:  denied  { noatsecure } for  pid=14297 comm=\"crond\" scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=process\r\ntype=USER_AVC msg=audit(1438549074.223:1953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  denied  { stop } for auid=1000 uid=0 gid=0 path=\"/usr/lib/systemd/system/crond.service\" cmdline=\"systemctl stop crond.service\" scontext=toor_u:toor_r:toor_t:s0 tcontext=system_u:object_r:systemd_unit_file_t:s0 tclass=service  exe=\"/usr/lib/systemd/systemd\" sauid=0 hostname=? addr=? terminal=?'\r\ntype=USER_AVC msg=audit(1438549074.228:1955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  denied  { status } for auid=1000 uid=0 gid=0 path=\"/usr/lib/systemd/system/crond.service\" cmdline=\"systemctl stop crond.service\" scontext=toor_u:toor_r:toor_t:s0 tcontext=system_u:object_r:systemd_unit_file_t:s0 tclass=service  exe=\"/usr/lib/systemd/systemd\" sauid=0 hostname=? addr=? terminal=?'\r\ntype=AVC msg=audit(1438545661.853:1544): avc:  denied  { search } for  pid=13550 comm=\"crond\" name=\"faillock\" dev=\"tmpfs\" ino=14063 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:faillog_t:s0 tclass=dir\r\ntype=AVC msg=audit(1438545661.861:1548): avc:  denied  { use } for  pid=13550 comm=\"crond\" path=\"/run/systemd/sessions/10.ref\" dev=\"tmpfs\" ino=66942 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=fd\r\ntype=AVC msg=audit(1438545661.861:1548): avc:  denied  { write } for  pid=13550 comm=\"crond\" path=\"/run/systemd/sessions/10.ref\" dev=\"tmpfs\" ino=66942 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:systemd_logind_var_run_t:s0 tclass=fifo_file```"}}