(typealias cron_var_run_t)
(typealiasactual cron_var_run_t cron_runtime_t)
(typealias system_cronjob_var_run_t)
(typealiasactual system_cronjob_var_run_t system_cronjob_runtime_t)
(typealias crond_var_run_t)
(typealiasactual crond_var_run_t crond_runtime_t)
(typealias system_crond_lock_t)
(typealiasactual system_crond_lock_t system_cronjob_lock_t)
(typealias system_crond_t)
(typealiasactual system_crond_t system_cronjob_t)
(typealias system_crond_tmp_t)
(typealiasactual system_crond_tmp_t system_cronjob_tmp_t)
(typeattribute cron_spool_type)
(typeattributeset cron_spool_type (system_cron_spool_t user_cron_spool_t ))
(typeattribute crontab_domain)
(typeattributeset crontab_domain (admin_crontab_t crontab_t ))
(type anacron_exec_t)
(roletype object_r anacron_exec_t)
(type cron_runtime_t)
(roletype object_r cron_runtime_t)
(type cron_spool_t)
(roletype object_r cron_spool_t)
(type cron_var_lib_t)
(roletype object_r cron_var_lib_t)
(type cron_log_t)
(roletype object_r cron_log_t)
(type cronjob_t)
(roletype object_r cronjob_t)
(type crond_t)
(roletype object_r crond_t)
(type crond_exec_t)
(roletype object_r crond_exec_t)
(type crond_initrc_exec_t)
(roletype object_r crond_initrc_exec_t)
(type crond_runtime_t)
(roletype object_r crond_runtime_t)
(type crond_tmp_t)
(roletype object_r crond_tmp_t)
(type crond_unit_t)
(roletype object_r crond_unit_t)
(type crontab_exec_t)
(roletype object_r crontab_exec_t)
(type admin_crontab_t)
(roletype object_r admin_crontab_t)
(type admin_crontab_tmp_t)
(roletype object_r admin_crontab_tmp_t)
(type crontab_t)
(roletype object_r crontab_t)
(type crontab_tmp_t)
(roletype object_r crontab_tmp_t)
(type system_cron_spool_t)
(roletype object_r system_cron_spool_t)
(type system_cronjob_t)
(roletype object_r system_cronjob_t)
(type system_cronjob_lock_t)
(roletype object_r system_cronjob_lock_t)
(type system_cronjob_runtime_t)
(roletype object_r system_cronjob_runtime_t)
(type system_cronjob_tmp_t)
(roletype object_r system_cronjob_tmp_t)
(type system_cronjob_var_lib_t)
(roletype object_r system_cronjob_var_lib_t)
(type user_cron_spool_t)
(roletype object_r user_cron_spool_t)
(type user_cron_spool_log_t)
(roletype object_r user_cron_spool_log_t)
(type unconfined_cronjob_t)
(roletype object_r unconfined_cronjob_t)
(boolean cron_can_relabel false)
(boolean cron_userdomain_transition false)
(boolean fcron_crond false)
(boolean cron_read_generic_user_content true)
(boolean cron_read_all_user_content false)
(boolean cron_manage_generic_user_content false)
(boolean cron_manage_all_user_content false)
(roleattributeset cil_gen_require system_r)
(roletype system_r crond_t)
(roletype system_r system_cronjob_t)
(typeattributeset cil_gen_require crontab_domain)
(typeattributeset crontab_domain (admin_crontab_t crontab_t ))
(typeattributeset cil_gen_require application_exec_type)
(typeattributeset application_exec_type (anacron_exec_t crontab_exec_t ))
(typeattributeset cil_gen_require exec_type)
(typeattributeset exec_type (anacron_exec_t shell_exec_t crond_exec_t crond_initrc_exec_t crontab_exec_t ))
(typeattributeset cil_gen_require file_type)
(typeattributeset file_type (anacron_exec_t cron_runtime_t cron_spool_t cron_var_lib_t cron_log_t shell_exec_t crond_exec_t crond_initrc_exec_t crond_runtime_t crond_tmp_t crond_unit_t crontab_exec_t admin_crontab_tmp_t crontab_tmp_t system_cron_spool_t system_cronjob_lock_t system_cronjob_runtime_t system_cronjob_tmp_t system_cronjob_var_lib_t user_cron_spool_t user_cron_spool_log_t ))
(typeattributeset cil_gen_require non_security_file_type)
(typeattributeset non_security_file_type (anacron_exec_t cron_runtime_t cron_spool_t cron_var_lib_t cron_log_t shell_exec_t crond_exec_t crond_initrc_exec_t crond_runtime_t crond_tmp_t crond_unit_t crontab_exec_t admin_crontab_tmp_t crontab_tmp_t system_cron_spool_t system_cronjob_lock_t system_cronjob_runtime_t system_cronjob_tmp_t system_cronjob_var_lib_t user_cron_spool_t user_cron_spool_log_t ))
(typeattributeset cil_gen_require non_auth_file_type)
(typeattributeset non_auth_file_type (anacron_exec_t cron_runtime_t cron_spool_t cron_var_lib_t cron_log_t shell_exec_t crond_exec_t crond_initrc_exec_t crond_runtime_t crond_tmp_t crond_unit_t crontab_exec_t admin_crontab_tmp_t crontab_tmp_t system_cron_spool_t system_cronjob_lock_t system_cronjob_runtime_t system_cronjob_tmp_t system_cronjob_var_lib_t user_cron_spool_t user_cron_spool_log_t ))
(typeattributeset cil_gen_require pidfile)
(typeattributeset pidfile (cron_runtime_t crond_runtime_t system_cronjob_runtime_t ))
(typeattributeset cil_gen_require logfile)
(typeattributeset logfile (cron_log_t user_cron_spool_log_t ))
(typeattributeset cil_gen_require tmp_t)
(typeattributeset cil_gen_require tmpfs_t)
(typeattributeset cil_gen_require domain)
(typeattributeset domain (cronjob_t crond_t admin_crontab_t crontab_t system_cronjob_t unconfined_cronjob_t ))
(typeattributeset cil_gen_require init_t)
(typeattributeset cil_gen_require security_t)
(typeattributeset cil_gen_require sysfs_t)
(typeattributeset cil_gen_require selinux_config_t)
(typeattributeset cil_gen_require cron_job_domain)
(typeattributeset cron_job_domain (cronjob_t unconfined_cronjob_t ))
(typeattributeset cil_gen_require shell_exec_t)
(typeattributeset cil_gen_require entry_type)
(typeattributeset entry_type (anacron_exec_t shell_exec_t crond_exec_t crond_initrc_exec_t crontab_exec_t ))
(typeattributeset cil_gen_require ubac_constrained_type)
(typeattributeset ubac_constrained_type (cronjob_t admin_crontab_t admin_crontab_tmp_t crontab_t crontab_tmp_t user_cron_spool_t user_cron_spool_log_t ))
(typeattributeset cil_gen_require initrc_t)
(typeattributeset cil_gen_require daemon)
(typeattributeset daemon (crond_t system_cronjob_t ))
(typeattributeset cil_gen_require privfd)
(typeattributeset privfd (cronjob_t crond_t system_cronjob_t ))
(typeattributeset cil_gen_require cron_source_domain)
(typeattributeset cron_source_domain (crond_t ))
(typeattributeset cil_gen_require init_script_file_type)
(typeattributeset init_script_file_type (crond_initrc_exec_t ))
(typeattributeset cil_gen_require init_run_all_scripts_domain)
(typeattributeset cil_gen_require tmpfile)
(typeattributeset tmpfile (crond_tmp_t admin_crontab_tmp_t crontab_tmp_t system_cronjob_tmp_t ))
(typeattributeset cil_gen_require polymember)
(typeattributeset polymember (crond_tmp_t admin_crontab_tmp_t crontab_tmp_t system_cronjob_tmp_t ))
(typeattributeset cil_gen_require polyparent)
(typeattributeset polyparent (crond_tmp_t ))
(typeattributeset cil_gen_require systemdunit)
(typeattributeset systemdunit (crond_unit_t ))
(typeattributeset cil_gen_require crontab_exec_t)
(typeattributeset cil_gen_require application_domain_type)
(typeattributeset application_domain_type (admin_crontab_t crontab_t ))
(typeattributeset cil_gen_require chkpwd_t)
(typeattributeset cil_gen_require chkpwd_exec_t)
(typeattributeset cil_gen_require shadow_t)
(typeattributeset cil_gen_require auth_cache_t)
(typeattributeset cil_gen_require bin_t)
(typeattributeset cil_gen_require usr_t)
(typeattributeset cil_gen_require device_t)
(typeattributeset cil_gen_require random_device_t)
(typeattributeset cil_gen_require urandom_device_t)
(typeattributeset cil_gen_require nsswitch_domain)
(typeattributeset nsswitch_domain (crond_t admin_crontab_t crontab_t system_cronjob_t ))
(typeattributeset cil_gen_require faillog_t)
(typeattributeset cil_gen_require var_log_t)
(typeattributeset cil_gen_require var_t)
(typeattributeset cil_gen_require cert_t)
(typeattributeset cil_gen_require etc_t)
(typeattributeset cil_gen_require var_run_t)
(typeattributeset cil_gen_require lockfile)
(typeattributeset lockfile (system_cronjob_lock_t ))
(typeattributeset cil_gen_require syslogmanaged)
(typeattributeset syslogmanaged (cron_log_t ))
(typeattributeset cil_gen_require syslogd_t)
(typeattributeset cil_gen_require proc_t)
(typeattributeset cil_gen_require var_spool_t)
(typeattributeset cil_gen_require fs_t)
(typeattributeset cil_gen_require cgroup_types)
(typeattributeset cil_gen_require anon_inodefs_t)
(typeattributeset cil_gen_require var_auth_t)
(typeattributeset cil_gen_require syslogd_runtime_t)
(typeattributeset cil_gen_require devlog_t)
(typeattributeset cil_gen_require init_runtime_t)
(typeattributeset cil_gen_require console_device_t)
(typeattributeset cil_gen_require initrc_runtime_t)
(typeattributeset cil_gen_require locale_t)
(typeattributeset cil_gen_require user_tmp_t)
(typeattributeset cil_gen_require user_runtime_t)
(typeattributeset cil_gen_require user_runtime_root_t)
(typeattributeset cil_gen_require user_devpts_t)
(typeattributeset cil_gen_require devpts_t)
(typeattributeset cil_gen_require user_tty_device_t)
(typeattributeset cil_gen_require sysctl_t)
(typeattributeset cil_gen_require sysctl_kernel_t)
(typeattributeset cil_gen_require sysctl_fs_t)
(typeattributeset cil_gen_require kernel_t)
(typeattributeset cil_gen_require can_change_process_identity)
(typeattributeset can_change_process_identity (crond_t ))
(typeattributeset cil_gen_require can_change_process_role)
(typeattributeset can_change_process_role (crond_t ))
(typeattributeset cil_gen_require filesystem_type)
(typeattributeset cil_gen_require inotifyfs_t)
(typeattributeset cil_gen_require autofs_t)
(typeattributeset cil_gen_require etc_runtime_t)
(typeattributeset cil_gen_require var_lib_t)
(typeattributeset cil_gen_require default_t)
(typeattributeset cil_gen_require var_lock_t)
(typeattributeset cil_gen_require mlsfdshare)
(typeattributeset mlsfdshare (crond_t ))
(typeattributeset cil_gen_require mlsfileread)
(typeattributeset mlsfileread (crond_t ))
(typeattributeset cil_gen_require mlsfilewrite)
(typeattributeset mlsfilewrite (crond_t ))
(typeattributeset cil_gen_require mlsprocsetsl)
(typeattributeset mlsprocsetsl (crond_t ))
(typeattributeset cil_gen_require mlstrustedobject)
(typeattributeset mlstrustedobject (crond_t ))
(typeattributeset cil_gen_require initrc_exec_t)
(typeattributeset cil_gen_require systemd_unit_t)
(typeattributeset cil_gen_require can_read_shadow_passwords)
(typeattributeset can_read_shadow_passwords (crond_t ))
(typeattributeset cil_gen_require pam_domain)
(typeattributeset pam_domain (crond_t ))
(typeattributeset cil_gen_require default_context_t)
(typeattributeset cil_gen_require file_context_t)
(typeattributeset cil_gen_require user_home_dir_t)
(typeattributeset cil_gen_require home_root_t)
(typeattributeset cil_gen_require polydir)
(typeattributeset cil_gen_require poly_t)
(typeattributeset cil_gen_require proc_kcore_t)
(typeattributeset cil_gen_require proc_kmsg_t)
(typeattributeset cil_gen_require sysctl_irq_t)
(typeattributeset cil_gen_require proc_net_t)
(typeattributeset cil_gen_require sysctl_rpc_t)
(typeattributeset cil_gen_require proc_mdstat_t)
(typeattributeset cil_gen_require boot_t)
(typeattributeset cil_gen_require netlabel_peer_t)
(typeattributeset cil_gen_require netif_t)
(typeattributeset cil_gen_require node_t)
(typeattributeset cil_gen_require device_node)
(typeattributeset cil_gen_require mtrr_device_t)
(typeattributeset cil_gen_require root_t)
(typeattributeset cil_gen_require mlsfilereadtoclr)
(typeattributeset mlsfilereadtoclr (system_cronjob_t ))
(typeattributeset cil_gen_require rc_exec_t)
(typeattributeset cil_gen_require lib_t)
(typeattributeset cil_gen_require ld_so_t)
(typeattributeset cil_gen_require setfiles_t)
(typeattributeset cil_gen_require setfiles_exec_t)
(typeattributeset cil_gen_require user_home_t)
(typeattributeset cil_gen_require client_packet_type)
(typeattributeset cil_gen_require port_type)
(typeattributeset cil_gen_require nfs_t)
(typeattributeset cil_gen_require cifs_t)
(typeattributeset cil_gen_require user_home_content_type)
(allow cron_log_t tmp_t (filesystem (associate)))
(allow cron_log_t tmpfs_t (filesystem (associate)))
(allow cronjob_t shell_exec_t (file (entrypoint)))
(allow cronjob_t shell_exec_t (file (ioctl read getattr lock map execute open)))
(allow crond_t crond_exec_t (file (entrypoint)))
(allow crond_t crond_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t crond_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t crond_t (process (transition)))
(dontaudit initrc_t crond_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t crond_exec_t process crond_t)
(allow crond_t initrc_t (fd (use)))
(allow crond_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow crond_t initrc_t (process (sigchld)))
(allow initrc_t crond_initrc_exec_t (file (entrypoint)))
(allow initrc_t crond_initrc_exec_t (file (ioctl read getattr lock map execute open)))
(allow init_run_all_scripts_domain crond_initrc_exec_t (file (ioctl read getattr map execute open)))
(allow init_run_all_scripts_domain initrc_t (process (transition)))
(dontaudit init_run_all_scripts_domain initrc_t (process (noatsecure siginh rlimitinh)))
(typetransition init_run_all_scripts_domain crond_initrc_exec_t process initrc_t)
(allow initrc_t init_run_all_scripts_domain (fd (use)))
(allow initrc_t init_run_all_scripts_domain (fifo_file (ioctl read write getattr lock append)))
(allow initrc_t init_run_all_scripts_domain (process (sigchld)))
(allow admin_crontab_t crontab_exec_t (file (entrypoint)))
(allow admin_crontab_t crontab_exec_t (file (ioctl read getattr lock map execute open)))
(allow admin_crontab_t admin_crontab_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow admin_crontab_t admin_crontab_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow admin_crontab_t admin_crontab_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow admin_crontab_t admin_crontab_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow admin_crontab_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition admin_crontab_t tmp_t dir admin_crontab_tmp_t)
(typetransition admin_crontab_t tmp_t file admin_crontab_tmp_t)
(allow admin_crontab_t auth_cache_t (dir (getattr open search)))
(allow admin_crontab_t bin_t (dir (getattr open search)))
(allow admin_crontab_t bin_t (lnk_file (read getattr)))
(allow admin_crontab_t usr_t (dir (getattr open search)))
(allow admin_crontab_t chkpwd_exec_t (file (ioctl read getattr map execute open)))
(allow admin_crontab_t chkpwd_t (process (transition)))
(dontaudit admin_crontab_t chkpwd_t (process (noatsecure siginh rlimitinh)))
(typetransition admin_crontab_t chkpwd_exec_t process chkpwd_t)
(allow chkpwd_t admin_crontab_t (fd (use)))
(allow chkpwd_t admin_crontab_t (fifo_file (ioctl read write getattr lock append)))
(allow chkpwd_t admin_crontab_t (process (sigchld)))
(dontaudit admin_crontab_t shadow_t (file (ioctl read getattr lock open)))
(allow admin_crontab_t device_t (dir (getattr open search)))
(allow admin_crontab_t random_device_t (chr_file (ioctl read getattr lock open)))
(allow admin_crontab_t device_t (dir (getattr open search)))
(allow admin_crontab_t urandom_device_t (chr_file (ioctl read getattr lock open)))
(allow admin_crontab_t var_t (dir (getattr open search)))
(allow admin_crontab_t var_log_t (dir (getattr open search)))
(allow admin_crontab_t var_log_t (lnk_file (read getattr)))
(allow admin_crontab_t faillog_t (file (ioctl read write getattr lock append open)))
(allow admin_crontab_t self (capability (audit_write)))
(allow admin_crontab_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
(allow admin_crontab_t cert_t (dir (ioctl read getattr lock open search)))
(allow admin_crontab_t cert_t (dir (getattr open search)))
(allow admin_crontab_t cert_t (file (ioctl read getattr lock open)))
(allow admin_crontab_t cert_t (dir (getattr open search)))
(allow admin_crontab_t cert_t (lnk_file (read getattr)))
(allow crontab_t crontab_exec_t (file (entrypoint)))
(allow crontab_t crontab_exec_t (file (ioctl read getattr lock map execute open)))
(allow crontab_t crontab_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow crontab_t crontab_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow crontab_t crontab_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow crontab_t crontab_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow crontab_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition crontab_t tmp_t dir crontab_tmp_t)
(typetransition crontab_t tmp_t file crontab_tmp_t)
(allow crontab_t auth_cache_t (dir (getattr open search)))
(allow crontab_t bin_t (dir (getattr open search)))
(allow crontab_t bin_t (lnk_file (read getattr)))
(allow crontab_t usr_t (dir (getattr open search)))
(allow crontab_t chkpwd_exec_t (file (ioctl read getattr map execute open)))
(allow crontab_t chkpwd_t (process (transition)))
(dontaudit crontab_t chkpwd_t (process (noatsecure siginh rlimitinh)))
(typetransition crontab_t chkpwd_exec_t process chkpwd_t)
(allow chkpwd_t crontab_t (fd (use)))
(allow chkpwd_t crontab_t (fifo_file (ioctl read write getattr lock append)))
(allow chkpwd_t crontab_t (process (sigchld)))
(dontaudit crontab_t shadow_t (file (ioctl read getattr lock open)))
(allow crontab_t device_t (dir (getattr open search)))
(allow crontab_t random_device_t (chr_file (ioctl read getattr lock open)))
(allow crontab_t device_t (dir (getattr open search)))
(allow crontab_t urandom_device_t (chr_file (ioctl read getattr lock open)))
(allow crontab_t var_t (dir (getattr open search)))
(allow crontab_t var_log_t (dir (getattr open search)))
(allow crontab_t var_log_t (lnk_file (read getattr)))
(allow crontab_t faillog_t (file (ioctl read write getattr lock append open)))
(allow crontab_t self (capability (audit_write)))
(allow crontab_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
(allow crontab_t cert_t (dir (ioctl read getattr lock open search)))
(allow crontab_t cert_t (dir (getattr open search)))
(allow crontab_t cert_t (file (ioctl read getattr lock open)))
(allow crontab_t cert_t (dir (getattr open search)))
(allow crontab_t cert_t (lnk_file (read getattr)))
(allow system_cronjob_t anacron_exec_t (file (entrypoint)))
(allow system_cronjob_t anacron_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t anacron_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t system_cronjob_t (process (transition)))
(dontaudit initrc_t system_cronjob_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t anacron_exec_t process system_cronjob_t)
(allow system_cronjob_t initrc_t (fd (use)))
(allow system_cronjob_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow system_cronjob_t initrc_t (process (sigchld)))
(allow system_cronjob_t shell_exec_t (file (entrypoint)))
(allow system_cronjob_t shell_exec_t (file (ioctl read getattr lock map execute open)))
(allow user_cron_spool_log_t tmp_t (filesystem (associate)))
(allow user_cron_spool_log_t tmpfs_t (filesystem (associate)))
(allow cron_log_t tmp_t (filesystem (associate)))
(allow cron_log_t tmpfs_t (filesystem (associate)))
(allow syslogd_t var_t (dir (getattr open search)))
(allow syslogd_t var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow syslogd_t var_log_t (lnk_file (read getattr)))
(allow crontab_domain self (capability (chown dac_override fowner setgid setuid)))
(allow crontab_domain self (process (sigchld sigkill sigstop signull signal setsched getcap)))
(allow crontab_domain self (fifo_file (ioctl read write getattr lock append open)))
(allow crontab_domain cron_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow crontab_domain user_cron_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow crontab_domain user_cron_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow crontab_domain cron_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition crontab_domain cron_spool_t file user_cron_spool_t)
(allow crontab_domain cron_spool_t (dir (setattr)))
(allow crontab_domain crond_t (process (signal)))
(allow crontab_domain crond_runtime_t (file (ioctl read getattr lock open)))
(allow crontab_domain proc_t (dir (getattr open search)))
(allow crontab_domain proc_t (file (ioctl read getattr lock open)))
(allow crontab_domain proc_t (dir (getattr open search)))
(allow crontab_domain proc_t (lnk_file (read getattr)))
(allow crontab_domain proc_t (dir (getattr open search)))
(allow crontab_domain proc_t (dir (ioctl read getattr lock open search)))
(dontaudit crontab_domain security_t (dir (getattr open search)))
(allow crontab_domain var_t (dir (getattr open search)))
(allow crontab_domain var_spool_t (dir (ioctl read getattr lock open search)))
(allow crontab_domain etc_t (dir (ioctl read getattr lock open search)))
(allow crontab_domain etc_t (dir (getattr open search)))
(allow crontab_domain etc_t (file (ioctl read getattr lock open)))
(allow crontab_domain etc_t (dir (getattr open search)))
(allow crontab_domain etc_t (lnk_file (read getattr)))
(allow crontab_domain usr_t (dir (ioctl read getattr lock open search)))
(allow crontab_domain usr_t (dir (getattr open search)))
(allow crontab_domain usr_t (file (ioctl read getattr lock open)))
(allow crontab_domain usr_t (dir (getattr open search)))
(allow crontab_domain usr_t (lnk_file (read getattr)))
(allow crontab_domain var_run_t (lnk_file (read getattr)))
(allow crontab_domain var_t (dir (getattr open search)))
(allow crontab_domain var_run_t (dir (getattr open search)))
(allow crontab_domain fs_t (filesystem (getattr)))
(allow crontab_domain cgroup_types (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow crontab_domain cgroup_types (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow crontab_domain sysfs_t (dir (getattr open search)))
(allow crontab_domain sysfs_t (dir (getattr open search)))
(allow crontab_domain cgroup_types (dir (getattr open search)))
(allow crontab_domain cgroup_types (file (ioctl read write getattr lock append open)))
(allow crontab_domain cgroup_types (dir (getattr open search)))
(allow crontab_domain cgroup_types (lnk_file (read getattr)))
(allow crontab_domain sysfs_t (dir (getattr open search)))
(allow crontab_domain sysfs_t (dir (getattr open search)))
(allow crontab_domain privfd (fd (use)))
(dontaudit crontab_domain anon_inodefs_t (file (ioctl read write getattr lock append open)))
(allow crontab_domain var_t (dir (getattr open search)))
(allow crontab_domain var_auth_t (dir (getattr open search)))
(allow crontab_domain var_auth_t (file (ioctl read write getattr lock append open)))
(allow crontab_domain devlog_t (sock_file (write getattr append open)))
(allow crontab_domain var_run_t (lnk_file (read getattr)))
(allow crontab_domain var_t (dir (getattr open search)))
(allow crontab_domain var_run_t (dir (getattr open search)))
(allow crontab_domain init_runtime_t (dir (getattr open search)))
(allow crontab_domain syslogd_runtime_t (dir (getattr open search)))
(allow crontab_domain syslogd_t (unix_dgram_socket (sendto)))
(allow crontab_domain syslogd_t (unix_stream_socket (connectto)))
(allow crontab_domain self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow crontab_domain self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow crontab_domain device_t (dir (getattr open search)))
(allow crontab_domain device_t (dir (ioctl read getattr lock open search)))
(allow crontab_domain device_t (dir (getattr open search)))
(allow crontab_domain device_t (lnk_file (read getattr)))
(allow crontab_domain console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit crontab_domain console_device_t (chr_file (ioctl read getattr lock open)))
(allow crontab_domain self (capability (audit_write)))
(allow crontab_domain self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
(allow crontab_domain self (capability (audit_control)))
(allow crontab_domain self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
(dontaudit crontab_domain initrc_runtime_t (file (write lock)))
(allow crontab_domain var_run_t (lnk_file (read getattr)))
(allow crontab_domain var_t (dir (getattr open search)))
(allow crontab_domain var_run_t (dir (ioctl read getattr lock open search)))
(allow crontab_domain initrc_runtime_t (file (ioctl read getattr lock open)))
(allow crontab_domain init_t (dir (getattr open search)))
(allow crontab_domain init_t (file (ioctl read getattr lock open)))
(allow crontab_domain init_t (lnk_file (read getattr)))
(allow crontab_domain etc_t (dir (getattr open search)))
(allow crontab_domain etc_t (lnk_file (read getattr)))
(allow crontab_domain usr_t (dir (getattr open search)))
(allow crontab_domain locale_t (dir (ioctl read getattr lock open search)))
(allow crontab_domain locale_t (dir (getattr open search)))
(allow crontab_domain locale_t (file (ioctl read getattr lock open)))
(allow crontab_domain locale_t (dir (getattr open search)))
(allow crontab_domain locale_t (lnk_file (read getattr)))
(allow crontab_domain locale_t (file (map)))
(allow crontab_domain etc_t (dir (getattr open search)))
(allow crontab_domain selinux_config_t (dir (ioctl read getattr lock open search)))
(allow crontab_domain selinux_config_t (dir (getattr open search)))
(allow crontab_domain selinux_config_t (file (ioctl read getattr lock open)))
(allow crontab_domain selinux_config_t (dir (getattr open search)))
(allow crontab_domain selinux_config_t (lnk_file (read getattr)))
(allow crontab_domain user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow crontab_domain user_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow crontab_domain tmp_t (dir (getattr open search)))
(allow crontab_domain user_runtime_t (dir (getattr open search)))
(allow crontab_domain user_runtime_root_t (dir (getattr open search)))
(allow crontab_domain var_run_t (lnk_file (read getattr)))
(allow crontab_domain var_t (dir (getattr open search)))
(allow crontab_domain var_run_t (dir (getattr open search)))
(allow crontab_domain user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow crontab_domain user_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow crontab_domain tmp_t (dir (getattr open search)))
(allow crontab_domain user_runtime_t (dir (getattr open search)))
(allow crontab_domain user_runtime_root_t (dir (getattr open search)))
(allow crontab_domain var_run_t (lnk_file (read getattr)))
(allow crontab_domain var_t (dir (getattr open search)))
(allow crontab_domain var_run_t (dir (getattr open search)))
(allow crontab_domain device_t (dir (getattr open search)))
(allow crontab_domain device_t (dir (ioctl read getattr lock open search)))
(allow crontab_domain device_t (dir (getattr open search)))
(allow crontab_domain device_t (lnk_file (read getattr)))
(allow crontab_domain devpts_t (dir (ioctl read getattr lock open search)))
(allow crontab_domain user_devpts_t (chr_file (ioctl read write getattr append open)))
(allow crontab_domain user_tty_device_t (chr_file (ioctl read write getattr append open)))
(allow admin_crontab_t crond_t (process (signal)))
(allow admin_crontab_t security_t (filesystem (getattr)))
(allow admin_crontab_t sysfs_t (filesystem (getattr)))
(allow admin_crontab_t sysfs_t (dir (getattr open search)))
(allow admin_crontab_t sysfs_t (dir (getattr open search)))
(allow admin_crontab_t proc_t (dir (getattr open search)))
(allow admin_crontab_t proc_t (file (ioctl read getattr lock open)))
(allow admin_crontab_t proc_t (dir (getattr open search)))
(allow admin_crontab_t proc_t (lnk_file (read getattr)))
(allow admin_crontab_t proc_t (dir (getattr open search)))
(allow admin_crontab_t proc_t (dir (ioctl read getattr lock open search)))
(allow admin_crontab_t sysfs_t (dir (getattr open search)))
(allow admin_crontab_t sysfs_t (dir (getattr open search)))
(allow admin_crontab_t security_t (dir (ioctl read getattr lock open search)))
(allow admin_crontab_t security_t (file (ioctl read write getattr map open)))
(allow admin_crontab_t security_t (security (check_context)))
(allow admin_crontab_t sysfs_t (dir (getattr open search)))
(allow admin_crontab_t sysfs_t (dir (getattr open search)))
(allow admin_crontab_t self (netlink_selinux_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow admin_crontab_t security_t (dir (ioctl read getattr lock open search)))
(allow admin_crontab_t security_t (file (ioctl read write getattr map open)))
(allow admin_crontab_t security_t (security (compute_av)))
(allow admin_crontab_t sysfs_t (dir (getattr open search)))
(allow admin_crontab_t sysfs_t (dir (getattr open search)))
(allow admin_crontab_t security_t (dir (ioctl read getattr lock open search)))
(allow admin_crontab_t security_t (file (ioctl read write getattr map open)))
(allow admin_crontab_t security_t (security (compute_create)))
(allow admin_crontab_t sysfs_t (dir (getattr open search)))
(allow admin_crontab_t sysfs_t (dir (getattr open search)))
(allow admin_crontab_t security_t (dir (ioctl read getattr lock open search)))
(allow admin_crontab_t security_t (file (ioctl read write getattr map open)))
(allow admin_crontab_t security_t (security (compute_relabel)))
(allow admin_crontab_t sysfs_t (dir (getattr open search)))
(allow admin_crontab_t sysfs_t (dir (getattr open search)))
(allow admin_crontab_t security_t (dir (ioctl read getattr lock open search)))
(allow admin_crontab_t security_t (file (ioctl read write getattr map open)))
(allow admin_crontab_t security_t (security (compute_user)))
(dontaudit crond_t self (capability (net_admin)))
(allow crond_t self (capability (chown dac_override dac_read_search fowner setgid setuid sys_nice)))
(dontaudit crond_t self (capability (net_admin sys_resource sys_tty_config)))
(allow crond_t self (process (transition sigchld sigkill sigstop signull signal getsched setsched getsession getpgid setpgid getcap setcap share getattr setexec setfscreate noatsecure siginh setrlimit rlimitinh dyntransition setkeycreate setsockcreate getrlimit)))
(allow crond_t self (fd (use)))
(allow crond_t self (fifo_file (ioctl read write getattr lock append open)))
(allow crond_t self (unix_dgram_socket (sendto)))
(allow crond_t self (unix_stream_socket (listen accept connectto)))
(allow crond_t self (shm (create destroy getattr setattr read write associate unix_read unix_write lock)))
(allow crond_t self (sem (create destroy getattr setattr read write associate unix_read unix_write)))
(allow crond_t self (msgq (create destroy getattr setattr read write associate unix_read unix_write enqueue)))
(allow crond_t self (msg (send receive)))
(allow crond_t self (key (write search link)))
(dontaudit crond_t self (netlink_audit_socket (nlmsg_tty_audit)))
(allow crond_t cron_log_t (file (ioctl create getattr setattr lock append open)))
(allow crond_t var_t (dir (getattr open search)))
(allow crond_t var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition crond_t var_log_t file cron_log_t)
(allow crond_t var_log_t (lnk_file (read getattr)))
(allow crond_t crond_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow crond_t crond_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow crond_t var_t (dir (getattr open search)))
(allow crond_t var_run_t (lnk_file (read getattr)))
(allow crond_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition crond_t var_run_t file crond_runtime_t)
(allow crond_t cron_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow crond_t cron_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow crond_t cron_spool_t (dir (watch)))
(allow crond_t crond_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow crond_t crond_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow crond_t crond_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow crond_t crond_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow crond_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition crond_t tmp_t dir crond_tmp_t)
(typetransition crond_t tmp_t file crond_tmp_t)
(allow crond_t system_cron_spool_t (dir (getattr open search)))
(allow crond_t system_cron_spool_t (dir (ioctl read getattr lock open search)))
(allow crond_t system_cron_spool_t (dir (getattr open search)))
(allow crond_t system_cron_spool_t (file (ioctl read getattr lock open)))
(allow crond_t system_cron_spool_t (dir (watch)))
(allow crond_t system_cron_spool_t (file (watch)))
(allow crond_t user_cron_spool_t (dir (getattr open search)))
(allow crond_t user_cron_spool_t (dir (ioctl write getattr lock open add_name remove_name search)))
(allow crond_t user_cron_spool_t (dir (getattr open search)))
(allow crond_t user_cron_spool_t (file (ioctl read getattr lock open)))
(allow crond_t user_cron_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow crond_t user_cron_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow crond_t user_cron_spool_t (dir (watch)))
(allow crond_t system_cronjob_t (process (transition)))
(allow crond_t system_cronjob_t (fd (use)))
(allow crond_t system_cronjob_t (key (view read write search link setattr create)))
(dontaudit crond_t cronjob_t (process (noatsecure siginh rlimitinh)))
(dontaudit crond_t system_cronjob_t (process (noatsecure siginh rlimitinh)))
(allow crond_t anacron_exec_t (file (ioctl read getattr map execute open)))
(allow crond_t system_cronjob_t (process (transition)))
(dontaudit crond_t system_cronjob_t (process (noatsecure siginh rlimitinh)))
(typetransition crond_t anacron_exec_t process system_cronjob_t)
(allow system_cronjob_t crond_t (fd (use)))
(allow system_cronjob_t crond_t (fifo_file (ioctl read write getattr lock append)))
(allow system_cronjob_t crond_t (process (sigchld)))
(allow crond_t proc_t (dir (getattr open search)))
(allow crond_t sysctl_t (dir (getattr open search)))
(allow crond_t sysctl_kernel_t (dir (getattr open search)))
(allow crond_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow crond_t proc_t (dir (getattr open search)))
(allow crond_t sysctl_t (dir (getattr open search)))
(allow crond_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow crond_t proc_t (dir (getattr open search)))
(allow crond_t sysctl_t (dir (getattr open search)))
(allow crond_t sysctl_fs_t (dir (getattr open search)))
(allow crond_t sysctl_fs_t (file (ioctl read getattr lock open)))
(allow crond_t proc_t (dir (getattr open search)))
(allow crond_t sysctl_t (dir (getattr open search)))
(allow crond_t sysctl_fs_t (dir (ioctl read getattr lock open search)))
(allow crond_t kernel_t (key (search)))
(allow crond_t bin_t (dir (getattr open search)))
(allow crond_t bin_t (lnk_file (read getattr)))
(allow crond_t usr_t (dir (getattr open search)))
(allow crond_t bin_t (dir (getattr open search)))
(allow crond_t bin_t (dir (ioctl read getattr lock open search)))
(allow crond_t shell_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow crond_t bin_t (dir (getattr open search)))
(allow crond_t bin_t (lnk_file (read getattr)))
(allow crond_t usr_t (dir (getattr open search)))
(allow crond_t bin_t (dir (getattr open search)))
(allow crond_t bin_t (dir (ioctl read getattr lock open search)))
(allow crond_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow crond_t bin_t (dir (getattr open search)))
(allow crond_t bin_t (lnk_file (read getattr)))
(allow crond_t usr_t (dir (getattr open search)))
(allow crond_t bin_t (dir (getattr open search)))
(allow crond_t bin_t (dir (ioctl read getattr lock open search)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t sysfs_t (file (ioctl read getattr lock open)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t sysfs_t (lnk_file (read getattr)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow crond_t device_t (dir (getattr open search)))
(allow crond_t urandom_device_t (chr_file (ioctl read getattr lock open)))
(allow crond_t privfd (fd (use)))
(allow crond_t filesystem_type (filesystem (getattr)))
(allow crond_t file_type (filesystem (getattr)))
(allow crond_t inotifyfs_t (dir (ioctl read getattr lock open search)))
(allow crond_t cgroup_types (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow crond_t cgroup_types (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t cgroup_types (dir (getattr open search)))
(allow crond_t cgroup_types (file (ioctl read write getattr lock append open)))
(allow crond_t cgroup_types (dir (getattr open search)))
(allow crond_t cgroup_types (lnk_file (read getattr)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t autofs_t (dir (getattr open search)))
(allow crond_t usr_t (dir (ioctl read getattr lock open search)))
(allow crond_t usr_t (dir (getattr open search)))
(allow crond_t usr_t (file (ioctl read getattr lock open)))
(allow crond_t usr_t (dir (getattr open search)))
(allow crond_t usr_t (lnk_file (read getattr)))
(allow crond_t etc_t (dir (ioctl read getattr lock open search)))
(allow crond_t etc_t (dir (getattr open search)))
(allow crond_t etc_runtime_t (file (ioctl read getattr lock open)))
(allow crond_t etc_t (dir (getattr open search)))
(allow crond_t etc_runtime_t (lnk_file (read getattr)))
(allow crond_t var_t (dir (getattr open search)))
(allow crond_t var_spool_t (dir (ioctl read getattr lock open search)))
(allow crond_t var_spool_t (dir (getattr open search)))
(allow crond_t var_spool_t (file (ioctl read getattr lock open)))
(allow crond_t usr_t (dir (ioctl read getattr lock open search)))
(allow crond_t var_t (dir (getattr open search)))
(allow crond_t var_lib_t (dir (getattr open search)))
(allow crond_t default_t (dir (getattr open search)))
(allow crond_t var_lock_t (lnk_file (read getattr)))
(allow crond_t var_t (dir (getattr open search)))
(allow crond_t var_lock_t (dir (getattr open search)))
(allow crond_t lockfile (dir (ioctl read getattr lock open search)))
(allow crond_t lockfile (dir (getattr open search)))
(allow crond_t lockfile (file (ioctl read getattr lock open)))
(allow crond_t lockfile (dir (getattr open search)))
(allow crond_t lockfile (lnk_file (read getattr)))
(allow crond_t security_t (filesystem (getattr)))
(allow crond_t sysfs_t (filesystem (getattr)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t proc_t (dir (getattr open search)))
(allow crond_t proc_t (file (ioctl read getattr lock open)))
(allow crond_t proc_t (dir (getattr open search)))
(allow crond_t proc_t (lnk_file (read getattr)))
(allow crond_t proc_t (dir (getattr open search)))
(allow crond_t proc_t (dir (ioctl read getattr lock open search)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t security_t (dir (ioctl read getattr lock open search)))
(allow crond_t security_t (file (ioctl read write getattr map open)))
(allow crond_t security_t (security (check_context)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t self (netlink_selinux_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow crond_t security_t (dir (ioctl read getattr lock open search)))
(allow crond_t security_t (file (ioctl read write getattr map open)))
(allow crond_t security_t (security (compute_av)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t security_t (dir (ioctl read getattr lock open search)))
(allow crond_t security_t (file (ioctl read write getattr map open)))
(allow crond_t security_t (security (compute_create)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t security_t (dir (ioctl read getattr lock open search)))
(allow crond_t security_t (file (ioctl read write getattr map open)))
(allow crond_t security_t (security (compute_relabel)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t security_t (dir (ioctl read getattr lock open search)))
(allow crond_t security_t (file (ioctl read write getattr map open)))
(allow crond_t security_t (security (compute_user)))
(allow crond_t init_t (dir (getattr open search)))
(allow crond_t init_t (file (ioctl read getattr lock open)))
(allow crond_t init_t (lnk_file (read getattr)))
(allow crond_t var_run_t (lnk_file (read getattr)))
(allow crond_t var_t (dir (getattr open search)))
(allow crond_t var_run_t (dir (ioctl read getattr lock open search)))
(allow crond_t initrc_runtime_t (file (ioctl read write getattr lock append open)))
(allow crond_t etc_t (dir (ioctl read getattr lock open search)))
(allow crond_t self (process (setexec)))
(allow crond_t initrc_exec_t (file (ioctl read getattr map execute open)))
(allow crond_t initrc_t (process (transition)))
(dontaudit crond_t initrc_t (process (noatsecure siginh rlimitinh)))
(allow initrc_t crond_t (fd (use)))
(allow initrc_t crond_t (fifo_file (ioctl read write getattr lock append)))
(allow initrc_t crond_t (process (sigchld)))
(allow system_cronjob_t init_script_file_type (service (stop)))
(allow system_cronjob_t systemdunit (service (stop)))
(allow system_cronjob_t init_script_file_type (service (start)))
(allow system_cronjob_t systemdunit (service (start)))
(allow system_cronjob_t systemd_unit_t (service (status)))
(allow system_cronjob_t init_t (system (status)))
(allow crond_t var_t (dir (getattr open search)))
(allow crond_t var_auth_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow crond_t var_auth_t (file (ioctl read write getattr lock append open)))
(allow crond_t var_auth_t (lnk_file (ioctl read write getattr lock append)))
(allow crond_t auth_cache_t (dir (getattr open search)))
(allow crond_t bin_t (dir (getattr open search)))
(allow crond_t bin_t (lnk_file (read getattr)))
(allow crond_t usr_t (dir (getattr open search)))
(allow crond_t chkpwd_exec_t (file (ioctl read getattr map execute open)))
(allow crond_t chkpwd_t (process (transition)))
(dontaudit crond_t chkpwd_t (process (noatsecure siginh rlimitinh)))
(typetransition crond_t chkpwd_exec_t process chkpwd_t)
(allow chkpwd_t crond_t (fd (use)))
(allow chkpwd_t crond_t (fifo_file (ioctl read write getattr lock append)))
(allow chkpwd_t crond_t (process (sigchld)))
(dontaudit crond_t shadow_t (file (ioctl read getattr lock open)))
(allow crond_t device_t (dir (getattr open search)))
(allow crond_t random_device_t (chr_file (ioctl read getattr lock open)))
(allow crond_t device_t (dir (getattr open search)))
(allow crond_t urandom_device_t (chr_file (ioctl read getattr lock open)))
(allow crond_t var_t (dir (getattr open search)))
(allow crond_t var_log_t (dir (getattr open search)))
(allow crond_t var_log_t (lnk_file (read getattr)))
(allow crond_t faillog_t (file (ioctl read write getattr lock append open)))
(allow crond_t self (capability (audit_write)))
(allow crond_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
(allow crond_t cert_t (dir (ioctl read getattr lock open search)))
(allow crond_t cert_t (dir (getattr open search)))
(allow crond_t cert_t (file (ioctl read getattr lock open)))
(allow crond_t cert_t (dir (getattr open search)))
(allow crond_t cert_t (lnk_file (read getattr)))
(allow crond_t security_t (filesystem (getattr)))
(allow crond_t sysfs_t (filesystem (getattr)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t sysfs_t (dir (getattr open search)))
(allow crond_t security_t (dir (ioctl read getattr lock open search)))
(allow crond_t security_t (file (ioctl read getattr map open)))
(allow crond_t self (capability (audit_write)))
(allow crond_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
(allow crond_t devlog_t (sock_file (write getattr append open)))
(allow crond_t var_run_t (lnk_file (read getattr)))
(allow crond_t var_t (dir (getattr open search)))
(allow crond_t var_run_t (dir (getattr open search)))
(allow crond_t init_runtime_t (dir (getattr open search)))
(allow crond_t syslogd_runtime_t (dir (getattr open search)))
(allow crond_t syslogd_t (unix_dgram_socket (sendto)))
(allow crond_t syslogd_t (unix_stream_socket (connectto)))
(allow crond_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow crond_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow crond_t device_t (dir (getattr open search)))
(allow crond_t device_t (dir (ioctl read getattr lock open search)))
(allow crond_t device_t (dir (getattr open search)))
(allow crond_t device_t (lnk_file (read getattr)))
(allow crond_t console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit crond_t console_device_t (chr_file (ioctl read getattr lock open)))
(allow crond_t self (capability (audit_control)))
(allow crond_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
(allow crond_t etc_t (dir (getattr open search)))
(allow crond_t selinux_config_t (dir (ioctl read getattr lock open search)))
(allow crond_t selinux_config_t (dir (getattr open search)))
(allow crond_t selinux_config_t (file (ioctl read getattr lock open)))
(allow crond_t selinux_config_t (dir (getattr open search)))
(allow crond_t selinux_config_t (lnk_file (read getattr)))
(allow crond_t etc_t (dir (getattr open search)))
(allow crond_t selinux_config_t (dir (getattr open search)))
(allow crond_t default_context_t (dir (ioctl read getattr lock open search)))
(allow crond_t default_context_t (dir (getattr open search)))
(allow crond_t default_context_t (file (ioctl read getattr lock open)))
(allow crond_t etc_t (dir (getattr open search)))
(allow crond_t etc_t (lnk_file (read getattr)))
(allow crond_t usr_t (dir (getattr open search)))
(allow crond_t locale_t (dir (ioctl read getattr lock open search)))
(allow crond_t locale_t (dir (getattr open search)))
(allow crond_t locale_t (file (ioctl read getattr lock open)))
(allow crond_t locale_t (dir (getattr open search)))
(allow crond_t locale_t (lnk_file (read getattr)))
(allow crond_t locale_t (file (map)))
(allow crond_t user_home_dir_t (dir (ioctl read getattr lock open search)))
(allow crond_t home_root_t (dir (getattr open search)))
(allow crond_t home_root_t (lnk_file (read getattr)))
(allow system_cronjob_t self (capability (chown dac_override dac_read_search fowner fsetid setgid setuid net_bind_service net_admin sys_nice sys_resource)))
(allow system_cronjob_t self (process (sigchld sigkill sigstop signull signal getsched setsched setrlimit)))
(allow system_cronjob_t self (fd (use)))
(allow system_cronjob_t self (fifo_file (ioctl read write getattr lock append open)))
(allow system_cronjob_t self (passwd (rootok)))
(allow system_cronjob_t cron_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow system_cronjob_t var_t (dir (getattr open search)))
(allow system_cronjob_t var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition system_cronjob_t var_log_t file cron_log_t)
(allow system_cronjob_t var_log_t (lnk_file (read getattr)))
(allow system_cronjob_t cron_var_lib_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
(allow system_cronjob_t var_t (dir (getattr open search)))
(allow system_cronjob_t var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition system_cronjob_t var_lib_t file cron_var_lib_t)
(allow system_cronjob_t cron_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow system_cronjob_t var_t (dir (getattr open search)))
(allow system_cronjob_t var_run_t (lnk_file (read getattr)))
(allow system_cronjob_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition system_cronjob_t var_run_t file cron_runtime_t)
(allow system_cronjob_t system_cron_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow system_cronjob_t system_cron_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow system_cronjob_t system_cron_spool_t (file (entrypoint)))
(allow system_cronjob_t system_cronjob_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow system_cronjob_t system_cronjob_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow system_cronjob_t var_t (dir (getattr open search)))
(allow system_cronjob_t var_lock_t (lnk_file (read getattr)))
(allow system_cronjob_t var_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition system_cronjob_t var_lock_t lnk_file system_cronjob_lock_t)
(typetransition system_cronjob_t var_lock_t file system_cronjob_lock_t)
(allow system_cronjob_t crond_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow system_cronjob_t system_cronjob_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow system_cronjob_t crond_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow system_cronjob_t system_cronjob_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow system_cronjob_t crond_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow system_cronjob_t system_cronjob_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow system_cronjob_t crond_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition system_cronjob_t crond_tmp_t lnk_file system_cronjob_tmp_t)
(typetransition system_cronjob_t crond_tmp_t file system_cronjob_tmp_t)
(allow system_cronjob_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition system_cronjob_t tmp_t dir system_cronjob_tmp_t)
(typetransition system_cronjob_t tmp_t file system_cronjob_tmp_t)
(allow system_cronjob_t system_cronjob_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow system_cronjob_t system_cronjob_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow system_cronjob_t crond_t (fd (use)))
(allow system_cronjob_t crond_t (fifo_file (ioctl read write getattr lock append open)))
(allow system_cronjob_t crond_t (process (sigchld)))
(allow system_cronjob_t cron_spool_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t cron_spool_t (file (ioctl read write getattr lock append open)))
(allow system_cronjob_t crond_tmp_t (file (ioctl read write getattr lock append)))
(allow system_cronjob_t proc_t (dir (getattr open search)))
(allow system_cronjob_t proc_kcore_t (file (getattr)))
(allow system_cronjob_t proc_t (dir (getattr open search)))
(allow system_cronjob_t proc_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t proc_t (dir (getattr open search)))
(allow system_cronjob_t proc_kmsg_t (file (getattr)))
(allow system_cronjob_t proc_t (dir (getattr open search)))
(allow system_cronjob_t sysctl_irq_t (dir (getattr open search)))
(allow system_cronjob_t sysctl_irq_t (file (ioctl read getattr lock open)))
(allow system_cronjob_t proc_t (dir (getattr open search)))
(allow system_cronjob_t sysctl_irq_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t proc_t (dir (getattr open search)))
(allow system_cronjob_t sysctl_t (dir (getattr open search)))
(allow system_cronjob_t sysctl_kernel_t (dir (getattr open search)))
(allow system_cronjob_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow system_cronjob_t proc_t (dir (getattr open search)))
(allow system_cronjob_t sysctl_t (dir (getattr open search)))
(allow system_cronjob_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t proc_t (dir (getattr open search)))
(allow system_cronjob_t proc_net_t (dir (getattr open search)))
(allow system_cronjob_t proc_net_t (file (ioctl read getattr lock open)))
(allow system_cronjob_t proc_t (dir (getattr open search)))
(allow system_cronjob_t proc_net_t (dir (getattr open search)))
(allow system_cronjob_t proc_net_t (lnk_file (read getattr)))
(allow system_cronjob_t proc_t (dir (getattr open search)))
(allow system_cronjob_t proc_net_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t proc_t (dir (getattr open search)))
(allow system_cronjob_t proc_net_t (dir (getattr open search)))
(allow system_cronjob_t sysctl_rpc_t (dir (getattr open search)))
(allow system_cronjob_t sysctl_rpc_t (file (ioctl read getattr lock open)))
(allow system_cronjob_t proc_t (dir (getattr open search)))
(allow system_cronjob_t proc_net_t (dir (getattr open search)))
(allow system_cronjob_t sysctl_rpc_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t proc_t (dir (getattr open search)))
(allow system_cronjob_t proc_t (file (ioctl read getattr lock open)))
(allow system_cronjob_t proc_t (dir (getattr open search)))
(allow system_cronjob_t proc_t (lnk_file (read getattr)))
(allow system_cronjob_t proc_t (dir (getattr open search)))
(allow system_cronjob_t proc_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t proc_t (dir (getattr open search)))
(allow system_cronjob_t proc_mdstat_t (file (ioctl read getattr lock open)))
(allow system_cronjob_t proc_t (dir (getattr open search)))
(allow system_cronjob_t proc_t (dir (ioctl read getattr lock open search)))
(dontaudit system_cronjob_t boot_t (dir (getattr open search)))
(allow system_cronjob_t bin_t (dir (getattr open search)))
(allow system_cronjob_t bin_t (lnk_file (read getattr)))
(allow system_cronjob_t usr_t (dir (getattr open search)))
(allow system_cronjob_t bin_t (dir (getattr open search)))
(allow system_cronjob_t bin_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t exec_type (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow system_cronjob_t bin_t (dir (getattr open search)))
(allow system_cronjob_t exec_type (lnk_file (read getattr)))
(allow system_cronjob_t netlabel_peer_t (peer (recv)))
(allow system_cronjob_t netlabel_peer_t (tcp_socket (recvfrom)))
(allow system_cronjob_t netlabel_peer_t (udp_socket (recvfrom)))
(allow system_cronjob_t netlabel_peer_t (rawip_socket (recvfrom)))
(allow system_cronjob_t netif_t (netif (ingress egress)))
(allow system_cronjob_t netif_t (netif (egress)))
(allow system_cronjob_t netif_t (netif (ingress)))
(allow system_cronjob_t node_t (node (recvfrom sendto)))
(allow system_cronjob_t node_t (node (sendto)))
(allow system_cronjob_t node_t (node (recvfrom)))
(allow system_cronjob_t node_t (udp_socket (node_bind)))
(allow system_cronjob_t device_t (dir (getattr open search)))
(allow system_cronjob_t device_node (blk_file (getattr)))
(allow system_cronjob_t device_t (dir (getattr open search)))
(allow system_cronjob_t device_node (chr_file (getattr)))
(allow system_cronjob_t device_t (dir (getattr open search)))
(allow system_cronjob_t mtrr_device_t (file (getattr)))
(allow system_cronjob_t device_t (dir (getattr open search)))
(allow system_cronjob_t mtrr_device_t (chr_file (getattr)))
(allow system_cronjob_t device_t (dir (getattr open search)))
(allow system_cronjob_t random_device_t (chr_file (ioctl read getattr lock open)))
(allow system_cronjob_t device_t (dir (getattr open search)))
(allow system_cronjob_t urandom_device_t (chr_file (ioctl read getattr lock open)))
(allow system_cronjob_t sysfs_t (dir (getattr open search)))
(allow system_cronjob_t sysfs_t (file (ioctl read getattr lock open)))
(allow system_cronjob_t sysfs_t (dir (getattr open search)))
(allow system_cronjob_t sysfs_t (lnk_file (read getattr)))
(allow system_cronjob_t sysfs_t (dir (getattr open search)))
(allow system_cronjob_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t sysfs_t (dir (getattr open search)))
(allow system_cronjob_t sysfs_t (file (ioctl read write getattr lock append open)))
(allow system_cronjob_t sysfs_t (dir (getattr open search)))
(allow system_cronjob_t sysfs_t (lnk_file (read getattr)))
(allow system_cronjob_t sysfs_t (dir (getattr open search)))
(allow system_cronjob_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t filesystem_type (filesystem (getattr)))
(allow system_cronjob_t file_type (filesystem (getattr)))
(allow system_cronjob_t filesystem_type (dir (getattr open search)))
(allow system_cronjob_t filesystem_type (file (getattr)))
(allow system_cronjob_t filesystem_type (dir (getattr open search)))
(allow system_cronjob_t filesystem_type (lnk_file (getattr)))
(allow system_cronjob_t filesystem_type (dir (getattr open search)))
(allow system_cronjob_t filesystem_type (fifo_file (getattr)))
(allow system_cronjob_t filesystem_type (dir (getattr open search)))
(allow system_cronjob_t filesystem_type (sock_file (getattr)))
(dontaudit system_cronjob_t domain (dir (ioctl read getattr lock open search)))
(dontaudit system_cronjob_t domain (lnk_file (read getattr)))
(dontaudit system_cronjob_t domain (file (ioctl read getattr lock open)))
(dontaudit system_cronjob_t domain (sock_file (read getattr open)))
(dontaudit system_cronjob_t domain (fifo_file (ioctl read getattr lock open)))
(allow system_cronjob_t etc_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t etc_t (dir (getattr open search)))
(allow system_cronjob_t etc_t (lnk_file (read getattr)))
(allow system_cronjob_t etc_t (dir (getattr open search)))
(allow system_cronjob_t etc_t (file (ioctl read getattr map execute open execute_no_trans)))
(allow system_cronjob_t usr_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t usr_t (dir (getattr open search)))
(allow system_cronjob_t usr_t (file (ioctl read getattr map execute open execute_no_trans)))
(allow system_cronjob_t usr_t (dir (getattr open search)))
(allow system_cronjob_t usr_t (lnk_file (read getattr)))
(allow system_cronjob_t etc_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t etc_t (dir (getattr open search)))
(allow system_cronjob_t etc_runtime_t (file (ioctl read getattr lock open)))
(allow system_cronjob_t etc_t (dir (getattr open search)))
(allow system_cronjob_t etc_runtime_t (lnk_file (read getattr)))
(allow system_cronjob_t file_type (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t file_type (dir (getattr open search)))
(allow system_cronjob_t file_type (dir (getattr)))
(allow system_cronjob_t file_type (dir (getattr open search)))
(allow system_cronjob_t file_type (file (getattr)))
(allow system_cronjob_t file_type (dir (getattr open search)))
(allow system_cronjob_t file_type (lnk_file (getattr)))
(allow system_cronjob_t file_type (dir (getattr open search)))
(allow system_cronjob_t file_type (lnk_file (getattr)))
(allow system_cronjob_t file_type (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t file_type (dir (getattr open search)))
(allow system_cronjob_t file_type (fifo_file (getattr)))
(allow system_cronjob_t file_type (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t file_type (dir (getattr open search)))
(allow system_cronjob_t file_type (sock_file (getattr)))
(allow system_cronjob_t usr_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t usr_t (dir (getattr open search)))
(allow system_cronjob_t usr_t (file (ioctl read getattr lock open)))
(allow system_cronjob_t usr_t (dir (getattr open search)))
(allow system_cronjob_t usr_t (lnk_file (read getattr)))
(allow system_cronjob_t var_t (dir (getattr open search)))
(allow system_cronjob_t var_t (file (ioctl read getattr lock open)))
(dontaudit system_cronjob_t var_run_t (lnk_file (read getattr)))
(dontaudit system_cronjob_t var_run_t (dir (getattr open search)))
(allow system_cronjob_t var_t (dir (getattr open search)))
(allow system_cronjob_t var_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow system_cronjob_t var_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow system_cronjob_t var_t (dir (getattr open search)))
(allow system_cronjob_t var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow system_cronjob_t etc_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow system_cronjob_t root_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition system_cronjob_t root_t file etc_runtime_t)
(allow system_cronjob_t var_t (dir (getattr open search)))
(allow system_cronjob_t var_lib_t (dir (getattr open search)))
(allow system_cronjob_t var_lib_t (lnk_file (read getattr)))
(allow system_cronjob_t etc_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t initrc_exec_t (file (ioctl read getattr map execute open)))
(allow system_cronjob_t initrc_t (process (transition)))
(dontaudit system_cronjob_t initrc_t (process (noatsecure siginh rlimitinh)))
(typetransition system_cronjob_t initrc_exec_t process initrc_t)
(allow initrc_t system_cronjob_t (fd (use)))
(allow initrc_t system_cronjob_t (fifo_file (ioctl read write getattr lock append)))
(allow initrc_t system_cronjob_t (process (sigchld)))
(allow system_cronjob_t rc_exec_t (file (ioctl read getattr map execute open)))
(allow system_cronjob_t initrc_t (process (transition)))
(dontaudit system_cronjob_t initrc_t (process (noatsecure siginh rlimitinh)))
(typetransition system_cronjob_t rc_exec_t process initrc_t)
(allow initrc_t system_cronjob_t (fd (use)))
(allow initrc_t system_cronjob_t (fifo_file (ioctl read write getattr lock append)))
(allow initrc_t system_cronjob_t (process (sigchld)))
(allow system_cronjob_t systemd_unit_t (lnk_file (read getattr)))
(allow system_cronjob_t var_run_t (lnk_file (read getattr)))
(allow system_cronjob_t var_t (dir (getattr open search)))
(allow system_cronjob_t var_run_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t initrc_runtime_t (file (ioctl read getattr lock open)))
(allow system_cronjob_t initrc_t (fd (use)))
(allow system_cronjob_t usr_t (dir (getattr open search)))
(allow system_cronjob_t lib_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t lib_t (dir (getattr open search)))
(allow system_cronjob_t lib_t (lnk_file (read getattr)))
(allow system_cronjob_t lib_t (dir (getattr open search)))
(allow system_cronjob_t lib_t (file (ioctl read getattr map execute open execute_no_trans)))
(allow system_cronjob_t lib_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t lib_t (dir (getattr open search)))
(allow system_cronjob_t lib_t (lnk_file (read getattr)))
(allow system_cronjob_t ld_so_t (lnk_file (read getattr)))
(allow system_cronjob_t lib_t (dir (getattr open search)))
(allow system_cronjob_t ld_so_t (file (ioctl read getattr map execute open execute_no_trans)))
(allow system_cronjob_t var_t (dir (getattr open search)))
(allow system_cronjob_t var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow system_cronjob_t var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow system_cronjob_t self (capability (audit_write)))
(allow system_cronjob_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
(allow system_cronjob_t devlog_t (sock_file (write getattr append open)))
(allow system_cronjob_t var_run_t (lnk_file (read getattr)))
(allow system_cronjob_t var_t (dir (getattr open search)))
(allow system_cronjob_t var_run_t (dir (getattr open search)))
(allow system_cronjob_t init_runtime_t (dir (getattr open search)))
(allow system_cronjob_t syslogd_runtime_t (dir (getattr open search)))
(allow system_cronjob_t syslogd_t (unix_dgram_socket (sendto)))
(allow system_cronjob_t syslogd_t (unix_stream_socket (connectto)))
(allow system_cronjob_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow system_cronjob_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow system_cronjob_t device_t (dir (getattr open search)))
(allow system_cronjob_t device_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t device_t (dir (getattr open search)))
(allow system_cronjob_t device_t (lnk_file (read getattr)))
(allow system_cronjob_t console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit system_cronjob_t console_device_t (chr_file (ioctl read getattr lock open)))
(allow system_cronjob_t cert_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t cert_t (dir (getattr open search)))
(allow system_cronjob_t cert_t (file (ioctl read getattr lock open)))
(allow system_cronjob_t cert_t (dir (getattr open search)))
(allow system_cronjob_t cert_t (lnk_file (read getattr)))
(allow system_cronjob_t etc_t (dir (getattr open search)))
(allow system_cronjob_t etc_t (lnk_file (read getattr)))
(allow system_cronjob_t usr_t (dir (getattr open search)))
(allow system_cronjob_t locale_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t locale_t (dir (getattr open search)))
(allow system_cronjob_t locale_t (file (ioctl read getattr lock open)))
(allow system_cronjob_t locale_t (dir (getattr open search)))
(allow system_cronjob_t locale_t (lnk_file (read getattr)))
(allow system_cronjob_t locale_t (file (map)))
(allow system_cronjob_t etc_t (dir (getattr open search)))
(allow system_cronjob_t selinux_config_t (dir (ioctl read getattr lock open search)))
(allow system_cronjob_t selinux_config_t (dir (getattr open search)))
(allow system_cronjob_t selinux_config_t (file (ioctl read getattr lock open)))
(allow system_cronjob_t selinux_config_t (dir (getattr open search)))
(allow system_cronjob_t selinux_config_t (lnk_file (read getattr)))
(allow cronjob_t self (process (sigchld sigkill sigstop signull signal setsched)))
(allow cronjob_t self (fifo_file (ioctl read write getattr lock append open)))
(allow cronjob_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
(allow cronjob_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow cronjob_t crond_tmp_t (file (ioctl read write getattr lock append)))
(allow cronjob_t proc_t (dir (getattr open search)))
(allow cronjob_t proc_t (file (ioctl read getattr lock open)))
(allow cronjob_t proc_t (dir (getattr open search)))
(allow cronjob_t proc_t (lnk_file (read getattr)))
(allow cronjob_t proc_t (dir (getattr open search)))
(allow cronjob_t proc_t (dir (ioctl read getattr lock open search)))
(allow cronjob_t proc_t (dir (getattr open search)))
(allow cronjob_t sysctl_t (dir (getattr open search)))
(allow cronjob_t sysctl_kernel_t (dir (getattr open search)))
(allow cronjob_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow cronjob_t proc_t (dir (getattr open search)))
(allow cronjob_t sysctl_t (dir (getattr open search)))
(allow cronjob_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(dontaudit cronjob_t boot_t (dir (getattr open search)))
(allow cronjob_t netlabel_peer_t (peer (recv)))
(allow cronjob_t netlabel_peer_t (tcp_socket (recvfrom)))
(allow cronjob_t netlabel_peer_t (udp_socket (recvfrom)))
(allow cronjob_t netlabel_peer_t (rawip_socket (recvfrom)))
(allow cronjob_t netif_t (netif (ingress egress)))
(allow cronjob_t netif_t (netif (egress)))
(allow cronjob_t netif_t (netif (ingress)))
(allow cronjob_t node_t (node (recvfrom sendto)))
(allow cronjob_t node_t (node (sendto)))
(allow cronjob_t node_t (node (recvfrom)))
(allow cronjob_t client_packet_type (packet (send)))
(allow cronjob_t client_packet_type (packet (recv)))
(allow cronjob_t port_type (tcp_socket (name_connect)))
(allow cronjob_t bin_t (dir (getattr open search)))
(allow cronjob_t bin_t (lnk_file (read getattr)))
(allow cronjob_t usr_t (dir (getattr open search)))
(allow cronjob_t bin_t (dir (getattr open search)))
(allow cronjob_t bin_t (dir (ioctl read getattr lock open search)))
(allow cronjob_t exec_type (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow cronjob_t bin_t (dir (getattr open search)))
(allow cronjob_t exec_type (lnk_file (read getattr)))
(allow cronjob_t device_t (dir (getattr open search)))
(allow cronjob_t urandom_device_t (chr_file (ioctl read getattr lock open)))
(allow cronjob_t filesystem_type (filesystem (getattr)))
(allow cronjob_t file_type (filesystem (getattr)))
(dontaudit cronjob_t domain (dir (ioctl read getattr lock open search)))
(dontaudit cronjob_t domain (lnk_file (read getattr)))
(dontaudit cronjob_t domain (file (ioctl read getattr lock open)))
(dontaudit cronjob_t domain (sock_file (read getattr open)))
(dontaudit cronjob_t domain (fifo_file (ioctl read getattr lock open)))
(dontaudit cronjob_t domain (process (getattr)))
(allow cronjob_t etc_t (dir (ioctl read getattr lock open search)))
(allow cronjob_t etc_t (dir (getattr open search)))
(allow cronjob_t etc_t (lnk_file (read getattr)))
(allow cronjob_t etc_t (dir (getattr open search)))
(allow cronjob_t etc_t (file (ioctl read getattr map execute open execute_no_trans)))
(allow cronjob_t etc_t (dir (ioctl read getattr lock open search)))
(allow cronjob_t etc_t (dir (getattr open search)))
(allow cronjob_t etc_runtime_t (file (ioctl read getattr lock open)))
(allow cronjob_t etc_t (dir (getattr open search)))
(allow cronjob_t etc_runtime_t (lnk_file (read getattr)))
(allow cronjob_t var_t (dir (getattr open search)))
(allow cronjob_t var_t (file (ioctl read getattr lock open)))
(allow cronjob_t usr_t (dir (ioctl read getattr lock open search)))
(allow cronjob_t usr_t (dir (getattr open search)))
(allow cronjob_t usr_t (file (ioctl read getattr lock open)))
(allow cronjob_t usr_t (dir (getattr open search)))
(allow cronjob_t usr_t (lnk_file (read getattr)))
(allow cronjob_t var_t (dir (getattr open search)))
(allow cronjob_t var_spool_t (dir (getattr open search)))
(dontaudit cronjob_t var_run_t (lnk_file (read getattr)))
(dontaudit cronjob_t var_run_t (dir (getattr open search)))
(allow cronjob_t usr_t (dir (getattr open search)))
(allow cronjob_t lib_t (dir (ioctl read getattr lock open search)))
(allow cronjob_t lib_t (dir (getattr open search)))
(allow cronjob_t lib_t (lnk_file (read getattr)))
(allow cronjob_t lib_t (dir (getattr open search)))
(allow cronjob_t lib_t (file (ioctl read getattr map execute open execute_no_trans)))
(allow cronjob_t lib_t (dir (ioctl read getattr lock open search)))
(allow cronjob_t lib_t (dir (getattr open search)))
(allow cronjob_t lib_t (lnk_file (read getattr)))
(allow cronjob_t ld_so_t (lnk_file (read getattr)))
(allow cronjob_t lib_t (dir (getattr open search)))
(allow cronjob_t ld_so_t (file (ioctl read getattr map execute open execute_no_trans)))
(allow cronjob_t var_t (dir (getattr open search)))
(allow cronjob_t var_log_t (dir (getattr open search)))
(allow cronjob_t var_log_t (lnk_file (read getattr)))
(allow cronjob_t etc_t (dir (getattr open search)))
(allow cronjob_t selinux_config_t (dir (ioctl read getattr lock open search)))
(allow cronjob_t selinux_config_t (dir (getattr open search)))
(allow cronjob_t selinux_config_t (file (ioctl read getattr lock open)))
(allow cronjob_t selinux_config_t (dir (getattr open search)))
(allow cronjob_t selinux_config_t (lnk_file (read getattr)))
(allow cronjob_t etc_t (dir (getattr open search)))
(allow cronjob_t etc_t (lnk_file (read getattr)))
(allow cronjob_t usr_t (dir (getattr open search)))
(allow cronjob_t locale_t (dir (ioctl read getattr lock open search)))
(allow cronjob_t locale_t (dir (getattr open search)))
(allow cronjob_t locale_t (file (ioctl read getattr lock open)))
(allow cronjob_t locale_t (dir (getattr open search)))
(allow cronjob_t locale_t (lnk_file (read getattr)))
(allow cronjob_t locale_t (file (map)))
(allow cronjob_t home_root_t (dir (getattr open search)))
(allow cronjob_t home_root_t (lnk_file (read getattr)))
(allow cronjob_t user_home_dir_t (dir (getattr open search)))
(allow cronjob_t user_home_t (dir (getattr open search)))
(allow cronjob_t user_home_t (file (ioctl read getattr map execute open execute_no_trans)))
(dontaudit crond_t unconfined_cronjob_t (process (noatsecure siginh rlimitinh)))
(rangetransition system_cronjob_t initrc_exec_t process ((s0 ) (s0 )))
(rangetransition crond_t initrc_exec_t process ((s0 ) (s0 )))
(typetransition syslogd_t var_log_t file "cron.log" cron_log_t)
(booleanif (cron_manage_all_user_content)
    (true
        (allow crontab_domain user_home_content_type (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow cronjob_t user_home_content_type (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow crontab_domain user_home_content_type (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow cronjob_t user_home_content_type (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow crontab_domain user_home_content_type (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow cronjob_t user_home_content_type (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow crontab_domain user_home_content_type (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow cronjob_t user_home_content_type (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow crontab_domain user_home_content_type (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
        (allow cronjob_t user_home_content_type (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
        (allow crontab_domain user_home_content_type (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow cronjob_t user_home_content_type (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow crontab_domain user_home_content_type (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow cronjob_t user_home_content_type (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow crontab_domain user_home_content_type (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow cronjob_t user_home_content_type (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow crontab_domain user_home_content_type (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
        (allow cronjob_t user_home_content_type (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
        (allow crontab_domain user_home_content_type (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow cronjob_t user_home_content_type (dir (ioctl read write getattr lock open add_name remove_name search)))
    )
)
(booleanif (cron_manage_generic_user_content)
    (true
        (allow crontab_domain home_root_t (lnk_file (read getattr)))
        (allow cronjob_t home_root_t (lnk_file (read getattr)))
        (allow crontab_domain home_root_t (dir (getattr open search)))
        (allow cronjob_t home_root_t (dir (getattr open search)))
        (allow crontab_domain user_home_dir_t (dir (getattr open search)))
        (allow cronjob_t user_home_dir_t (dir (getattr open search)))
        (allow crontab_domain user_home_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
        (allow cronjob_t user_home_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
        (allow crontab_domain user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow cronjob_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow crontab_domain home_root_t (lnk_file (read getattr)))
        (allow cronjob_t home_root_t (lnk_file (read getattr)))
        (allow crontab_domain home_root_t (dir (getattr open search)))
        (allow cronjob_t home_root_t (dir (getattr open search)))
        (allow crontab_domain user_home_dir_t (dir (getattr open search)))
        (allow cronjob_t user_home_dir_t (dir (getattr open search)))
        (allow crontab_domain user_home_t (file (ioctl read write create getattr setattr lock append map unlink link rename open)))
        (allow cronjob_t user_home_t (file (ioctl read write create getattr setattr lock append map unlink link rename open)))
        (allow crontab_domain user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow cronjob_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow crontab_domain home_root_t (lnk_file (read getattr)))
        (allow cronjob_t home_root_t (lnk_file (read getattr)))
        (allow crontab_domain home_root_t (dir (getattr open search)))
        (allow cronjob_t home_root_t (dir (getattr open search)))
        (allow crontab_domain user_home_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
        (allow cronjob_t user_home_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
        (allow crontab_domain user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow crontab_domain user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow cronjob_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow cronjob_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow crontab_domain var_run_t (dir (getattr open search)))
        (allow cronjob_t var_run_t (dir (getattr open search)))
        (allow crontab_domain var_t (dir (getattr open search)))
        (allow cronjob_t var_t (dir (getattr open search)))
        (allow crontab_domain var_run_t (lnk_file (read getattr)))
        (allow cronjob_t var_run_t (lnk_file (read getattr)))
        (allow crontab_domain user_runtime_root_t (dir (getattr open search)))
        (allow cronjob_t user_runtime_root_t (dir (getattr open search)))
        (allow crontab_domain user_runtime_t (dir (getattr open search)))
        (allow cronjob_t user_runtime_t (dir (getattr open search)))
        (allow crontab_domain tmp_t (dir (getattr open search)))
        (allow cronjob_t tmp_t (dir (getattr open search)))
        (allow crontab_domain user_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
        (allow cronjob_t user_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
        (allow crontab_domain user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow cronjob_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow crontab_domain var_run_t (dir (getattr open search)))
        (allow cronjob_t var_run_t (dir (getattr open search)))
        (allow crontab_domain var_t (dir (getattr open search)))
        (allow cronjob_t var_t (dir (getattr open search)))
        (allow crontab_domain var_run_t (lnk_file (read getattr)))
        (allow cronjob_t var_run_t (lnk_file (read getattr)))
        (allow crontab_domain user_runtime_root_t (dir (getattr open search)))
        (allow cronjob_t user_runtime_root_t (dir (getattr open search)))
        (allow crontab_domain user_runtime_t (dir (getattr open search)))
        (allow cronjob_t user_runtime_t (dir (getattr open search)))
        (allow crontab_domain tmp_t (dir (getattr open search)))
        (allow cronjob_t tmp_t (dir (getattr open search)))
        (allow crontab_domain user_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow cronjob_t user_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow crontab_domain user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow cronjob_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow crontab_domain var_run_t (dir (getattr open search)))
        (allow cronjob_t var_run_t (dir (getattr open search)))
        (allow crontab_domain var_t (dir (getattr open search)))
        (allow cronjob_t var_t (dir (getattr open search)))
        (allow crontab_domain var_run_t (lnk_file (read getattr)))
        (allow cronjob_t var_run_t (lnk_file (read getattr)))
        (allow crontab_domain user_runtime_root_t (dir (getattr open search)))
        (allow cronjob_t user_runtime_root_t (dir (getattr open search)))
        (allow crontab_domain user_runtime_t (dir (getattr open search)))
        (allow cronjob_t user_runtime_t (dir (getattr open search)))
        (allow crontab_domain tmp_t (dir (getattr open search)))
        (allow cronjob_t tmp_t (dir (getattr open search)))
        (allow crontab_domain user_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
        (allow cronjob_t user_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
        (allow crontab_domain user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow cronjob_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow cronjob_t home_root_t (lnk_file (read getattr)))
        (allow cronjob_t home_root_t (dir (getattr open search)))
        (allow cronjob_t user_home_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow cronjob_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow cronjob_t user_home_dir_t (dir (getattr open search)))
        (allow cronjob_t home_root_t (lnk_file (read getattr)))
        (allow cronjob_t home_root_t (dir (getattr open search)))
        (allow cronjob_t user_home_dir_t (dir (getattr open search)))
        (allow cronjob_t user_home_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow cronjob_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow cronjob_t var_run_t (dir (getattr open search)))
        (allow cronjob_t var_t (dir (getattr open search)))
        (allow cronjob_t var_run_t (lnk_file (read getattr)))
        (allow cronjob_t user_runtime_root_t (dir (getattr open search)))
        (allow cronjob_t user_runtime_t (dir (getattr open search)))
        (allow cronjob_t tmp_t (dir (getattr open search)))
        (allow cronjob_t user_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow cronjob_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow cronjob_t var_run_t (dir (getattr open search)))
        (allow cronjob_t var_t (dir (getattr open search)))
        (allow cronjob_t var_run_t (lnk_file (read getattr)))
        (allow cronjob_t user_runtime_root_t (dir (getattr open search)))
        (allow cronjob_t user_runtime_t (dir (getattr open search)))
        (allow cronjob_t tmp_t (dir (getattr open search)))
        (allow cronjob_t user_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow cronjob_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
    )
)
(booleanif (cron_read_all_user_content)
    (true
        (allow crontab_domain user_home_content_type (sock_file (read getattr open)))
        (allow cronjob_t user_home_content_type (sock_file (read getattr open)))
        (allow crontab_domain user_home_content_type (dir (getattr open search)))
        (allow cronjob_t user_home_content_type (dir (getattr open search)))
        (allow crontab_domain user_home_content_type (fifo_file (ioctl read getattr lock open)))
        (allow cronjob_t user_home_content_type (fifo_file (ioctl read getattr lock open)))
        (allow crontab_domain user_home_content_type (dir (getattr open search)))
        (allow cronjob_t user_home_content_type (dir (getattr open search)))
        (allow crontab_domain user_home_content_type (lnk_file (read getattr)))
        (allow cronjob_t user_home_content_type (lnk_file (read getattr)))
        (allow crontab_domain user_home_content_type (dir (getattr open search)))
        (allow cronjob_t user_home_content_type (dir (getattr open search)))
        (allow crontab_domain user_home_content_type (file (ioctl read getattr lock open)))
        (allow cronjob_t user_home_content_type (file (ioctl read getattr lock open)))
        (allow crontab_domain user_home_content_type (dir (getattr open search)))
        (allow cronjob_t user_home_content_type (dir (getattr open search)))
        (allow crontab_domain user_home_content_type (dir (ioctl read getattr lock open search)))
        (allow cronjob_t user_home_content_type (dir (ioctl read getattr lock open search)))
        (allow crontab_domain user_home_content_type (dir (getattr open search)))
        (allow cronjob_t user_home_content_type (dir (getattr open search)))
        (allow crontab_domain var_run_t (dir (getattr open search)))
        (allow cronjob_t var_run_t (dir (getattr open search)))
        (allow crontab_domain var_t (dir (getattr open search)))
        (allow cronjob_t var_t (dir (getattr open search)))
        (allow crontab_domain var_run_t (lnk_file (read getattr)))
        (allow cronjob_t var_run_t (lnk_file (read getattr)))
        (allow crontab_domain user_runtime_root_t (dir (getattr open search)))
        (allow cronjob_t user_runtime_root_t (dir (getattr open search)))
        (allow crontab_domain user_runtime_t (dir (getattr open search)))
        (allow cronjob_t user_runtime_t (dir (getattr open search)))
        (allow crontab_domain tmp_t (dir (getattr open search)))
        (allow cronjob_t tmp_t (dir (getattr open search)))
        (allow crontab_domain user_runtime_t (dir (ioctl read getattr lock open search)))
        (allow cronjob_t user_runtime_t (dir (ioctl read getattr lock open search)))
        (allow crontab_domain user_tmp_t (dir (ioctl read getattr lock open search)))
        (allow cronjob_t user_tmp_t (dir (ioctl read getattr lock open search)))
    )
)
(booleanif (cron_read_generic_user_content)
    (true
        (allow crontab_domain var_run_t (dir (getattr open search)))
        (allow cronjob_t var_run_t (dir (getattr open search)))
        (allow crontab_domain var_t (dir (getattr open search)))
        (allow cronjob_t var_t (dir (getattr open search)))
        (allow crontab_domain var_run_t (lnk_file (read getattr)))
        (allow cronjob_t var_run_t (lnk_file (read getattr)))
        (allow crontab_domain user_runtime_root_t (dir (getattr open search)))
        (allow cronjob_t user_runtime_root_t (dir (getattr open search)))
        (allow crontab_domain user_runtime_t (dir (getattr open search)))
        (allow cronjob_t user_runtime_t (dir (getattr open search)))
        (allow crontab_domain tmp_t (dir (getattr open search)))
        (allow cronjob_t tmp_t (dir (getattr open search)))
        (allow crontab_domain user_tmp_t (dir (ioctl read getattr lock open search)))
        (allow cronjob_t user_tmp_t (dir (ioctl read getattr lock open search)))
        (allow crontab_domain user_tmp_t (lnk_file (read getattr)))
        (allow cronjob_t user_tmp_t (lnk_file (read getattr)))
        (allow crontab_domain user_tmp_t (dir (getattr open search)))
        (allow cronjob_t user_tmp_t (dir (getattr open search)))
        (allow crontab_domain var_run_t (dir (getattr open search)))
        (allow cronjob_t var_run_t (dir (getattr open search)))
        (allow crontab_domain var_t (dir (getattr open search)))
        (allow cronjob_t var_t (dir (getattr open search)))
        (allow crontab_domain var_run_t (lnk_file (read getattr)))
        (allow cronjob_t var_run_t (lnk_file (read getattr)))
        (allow crontab_domain user_runtime_root_t (dir (getattr open search)))
        (allow cronjob_t user_runtime_root_t (dir (getattr open search)))
        (allow crontab_domain user_runtime_t (dir (getattr open search)))
        (allow cronjob_t user_runtime_t (dir (getattr open search)))
        (allow crontab_domain tmp_t (dir (getattr open search)))
        (allow cronjob_t tmp_t (dir (getattr open search)))
        (allow crontab_domain user_tmp_t (dir (ioctl read getattr lock open search)))
        (allow cronjob_t user_tmp_t (dir (ioctl read getattr lock open search)))
        (allow crontab_domain user_tmp_t (file (ioctl read getattr lock open)))
        (allow cronjob_t user_tmp_t (file (ioctl read getattr lock open)))
        (allow crontab_domain user_tmp_t (dir (getattr open search)))
        (allow cronjob_t user_tmp_t (dir (getattr open search)))
        (allow crontab_domain home_root_t (lnk_file (read getattr)))
        (allow cronjob_t home_root_t (lnk_file (read getattr)))
        (allow crontab_domain home_root_t (dir (getattr open search)))
        (allow cronjob_t home_root_t (dir (getattr open search)))
        (allow crontab_domain user_home_t (lnk_file (read getattr)))
        (allow cronjob_t user_home_t (lnk_file (read getattr)))
        (allow crontab_domain user_home_dir_t (dir (getattr open search)))
        (allow crontab_domain user_home_t (dir (getattr open search)))
        (allow cronjob_t user_home_dir_t (dir (getattr open search)))
        (allow cronjob_t user_home_t (dir (getattr open search)))
        (allow crontab_domain home_root_t (lnk_file (read getattr)))
        (allow cronjob_t home_root_t (lnk_file (read getattr)))
        (allow crontab_domain home_root_t (dir (getattr open search)))
        (allow cronjob_t home_root_t (dir (getattr open search)))
        (allow crontab_domain user_home_t (file (ioctl read getattr lock open)))
        (allow cronjob_t user_home_t (file (ioctl read getattr lock open)))
        (allow crontab_domain user_home_dir_t (dir (getattr open search)))
        (allow crontab_domain user_home_t (dir (getattr open search)))
        (allow cronjob_t user_home_dir_t (dir (getattr open search)))
        (allow cronjob_t user_home_t (dir (getattr open search)))
        (allow crontab_domain user_home_t (dir (ioctl read getattr lock open search)))
        (allow cronjob_t user_home_t (dir (ioctl read getattr lock open search)))
        (allow crontab_domain var_run_t (dir (getattr open search)))
        (allow cronjob_t var_run_t (dir (getattr open search)))
        (allow crontab_domain var_t (dir (getattr open search)))
        (allow cronjob_t var_t (dir (getattr open search)))
        (allow crontab_domain var_run_t (lnk_file (read getattr)))
        (allow cronjob_t var_run_t (lnk_file (read getattr)))
        (allow crontab_domain user_runtime_root_t (dir (getattr open search)))
        (allow cronjob_t user_runtime_root_t (dir (getattr open search)))
        (allow crontab_domain user_runtime_t (dir (getattr open search)))
        (allow cronjob_t user_runtime_t (dir (getattr open search)))
        (allow crontab_domain tmp_t (dir (getattr open search)))
        (allow cronjob_t tmp_t (dir (getattr open search)))
        (allow crontab_domain user_runtime_t (dir (ioctl read getattr lock open search)))
        (allow cronjob_t user_runtime_t (dir (ioctl read getattr lock open search)))
        (allow crontab_domain user_tmp_t (dir (ioctl read getattr lock open search)))
        (allow cronjob_t user_tmp_t (dir (ioctl read getattr lock open search)))
    )
    (false
        (dontaudit crontab_domain user_tmp_t (file (ioctl read getattr lock open)))
        (dontaudit cronjob_t user_tmp_t (file (ioctl read getattr lock open)))
        (dontaudit crontab_domain user_home_t (file (ioctl read getattr lock open)))
        (dontaudit cronjob_t user_home_t (file (ioctl read getattr lock open)))
        (dontaudit crontab_domain user_home_t (dir (ioctl read getattr lock open search)))
        (dontaudit cronjob_t user_home_t (dir (ioctl read getattr lock open search)))
        (dontaudit crontab_domain user_tmp_t (dir (ioctl read getattr lock open search)))
        (dontaudit cronjob_t user_tmp_t (dir (ioctl read getattr lock open search)))
        (dontaudit crontab_domain user_home_dir_t (dir (ioctl read getattr lock open search)))
        (dontaudit cronjob_t user_home_dir_t (dir (ioctl read getattr lock open search)))
        (dontaudit crontab_domain tmp_t (dir (ioctl read getattr lock open search)))
        (dontaudit cronjob_t tmp_t (dir (ioctl read getattr lock open search)))
        (dontaudit crontab_domain home_root_t (lnk_file (read getattr)))
        (dontaudit cronjob_t home_root_t (lnk_file (read getattr)))
        (dontaudit crontab_domain home_root_t (dir (ioctl read getattr lock open search)))
        (dontaudit cronjob_t home_root_t (dir (ioctl read getattr lock open search)))
    )
)
(booleanif (use_samba_home_dirs)
    (true
        (allow cronjob_t cifs_t (file (ioctl read getattr map execute open execute_no_trans)))
        (allow cronjob_t cifs_t (dir (getattr open search)))
        (allow cronjob_t cifs_t (dir (ioctl read getattr lock open search)))
    )
)
(booleanif (use_nfs_home_dirs)
    (true
        (allow cronjob_t nfs_t (file (ioctl read getattr map execute open execute_no_trans)))
        (allow cronjob_t nfs_t (dir (getattr open search)))
        (allow cronjob_t nfs_t (dir (ioctl read getattr lock open search)))
    )
)
(booleanif (cron_can_relabel)
    (true
        (allow setfiles_t system_cronjob_t (process (sigchld)))
        (allow setfiles_t system_cronjob_t (fifo_file (ioctl read write getattr lock append)))
        (allow setfiles_t system_cronjob_t (fd (use)))
        (typetransition system_cronjob_t setfiles_exec_t process setfiles_t)
        (dontaudit system_cronjob_t setfiles_t (process (noatsecure siginh rlimitinh)))
        (allow system_cronjob_t setfiles_t (process (transition)))
        (allow system_cronjob_t setfiles_exec_t (file (ioctl read getattr map execute open)))
        (allow system_cronjob_t usr_t (dir (getattr open search)))
        (allow system_cronjob_t bin_t (lnk_file (read getattr)))
        (allow system_cronjob_t bin_t (dir (getattr open search)))
        (allow system_cronjob_t usr_t (dir (getattr open search)))
    )
    (false
        (allow system_cronjob_t file_context_t (file (map)))
        (allow system_cronjob_t file_context_t (file (ioctl read getattr lock open)))
        (allow system_cronjob_t file_context_t (dir (getattr open search)))
        (allow system_cronjob_t selinux_config_t (dir (getattr open search)))
        (allow system_cronjob_t default_context_t (dir (getattr open search)))
        (allow system_cronjob_t etc_t (dir (getattr open search)))
        (allow system_cronjob_t security_t (security (compute_user)))
        (allow system_cronjob_t security_t (file (ioctl read write getattr map open)))
        (allow system_cronjob_t security_t (dir (ioctl read getattr lock open search)))
        (allow system_cronjob_t sysfs_t (dir (getattr open search)))
        (allow system_cronjob_t sysfs_t (dir (getattr open search)))
        (allow system_cronjob_t security_t (security (compute_relabel)))
        (allow system_cronjob_t security_t (file (ioctl read write getattr map open)))
        (allow system_cronjob_t security_t (dir (ioctl read getattr lock open search)))
        (allow system_cronjob_t sysfs_t (dir (getattr open search)))
        (allow system_cronjob_t sysfs_t (dir (getattr open search)))
        (allow system_cronjob_t security_t (security (compute_create)))
        (allow system_cronjob_t security_t (file (ioctl read write getattr map open)))
        (allow system_cronjob_t security_t (dir (ioctl read getattr lock open search)))
        (allow system_cronjob_t sysfs_t (dir (getattr open search)))
        (allow system_cronjob_t sysfs_t (dir (getattr open search)))
        (allow system_cronjob_t security_t (security (compute_av)))
        (allow system_cronjob_t security_t (file (ioctl read write getattr map open)))
        (allow system_cronjob_t security_t (dir (ioctl read getattr lock open search)))
        (allow system_cronjob_t self (netlink_selinux_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
        (allow system_cronjob_t sysfs_t (dir (getattr open search)))
        (allow system_cronjob_t sysfs_t (dir (getattr open search)))
        (allow system_cronjob_t security_t (security (check_context)))
        (allow system_cronjob_t security_t (file (ioctl read write getattr map open)))
        (allow system_cronjob_t security_t (dir (ioctl read getattr lock open search)))
        (allow system_cronjob_t sysfs_t (dir (getattr open search)))
        (allow system_cronjob_t sysfs_t (dir (getattr open search)))
        (allow system_cronjob_t proc_t (dir (ioctl read getattr lock open search)))
        (allow system_cronjob_t proc_t (dir (getattr open search)))
        (allow system_cronjob_t proc_t (lnk_file (read getattr)))
        (allow system_cronjob_t proc_t (dir (getattr open search)))
        (allow system_cronjob_t proc_t (file (ioctl read getattr lock open)))
        (allow system_cronjob_t proc_t (dir (getattr open search)))
        (allow system_cronjob_t sysfs_t (dir (getattr open search)))
        (allow system_cronjob_t sysfs_t (dir (getattr open search)))
        (allow system_cronjob_t sysfs_t (filesystem (getattr)))
        (allow system_cronjob_t security_t (filesystem (getattr)))
    )
)
(booleanif (allow_polyinstantiation)
    (true
        (allow crond_t tmpfs_t (filesystem (unmount)))
        (allow crond_t tmpfs_t (filesystem (mount)))
        (allow crond_t fs_t (filesystem (unmount)))
        (allow crond_t poly_t (dir (create mounton)))
        (allow crond_t polyparent (dir (ioctl read write getattr lock relabelfrom relabelto open add_name remove_name search)))
        (allow crond_t polydir (dir (write open add_name)))
        (allow crond_t polymember (dir (create setattr relabelto)))
        (allow crond_t self (process (setfscreate)))
        (allow crond_t polyparent (dir (getattr mounton)))
        (allow crond_t polymember (dir (getattr open search)))
        (allow crond_t polydir (dir (ioctl write create getattr setattr lock mounton open add_name search rmdir)))
        (allow crond_t self (capability (chown fowner fsetid sys_admin)))
        (allow crond_t security_t (security (compute_member)))
        (allow crond_t security_t (file (ioctl read write getattr map open)))
        (allow crond_t security_t (dir (ioctl read getattr lock open search)))
        (allow crond_t sysfs_t (dir (getattr open search)))
        (allow crond_t sysfs_t (dir (getattr open search)))
    )
)
(booleanif (cron_userdomain_transition)
    (true
        (dontaudit crond_t cronjob_t (key (view read write search link setattr create)))
        (dontaudit crond_t cronjob_t (fd (use)))
        (dontaudit crond_t cronjob_t (process (transition)))
        (dontaudit cronjob_t user_cron_spool_t (file (entrypoint)))
        (dontaudit cronjob_t crond_t (process (sigchld)))
        (dontaudit cronjob_t crond_t (fifo_file (ioctl read write getattr lock append open)))
        (dontaudit cronjob_t crond_t (fd (use)))
        (dontaudit crond_t unconfined_cronjob_t (key (view read write search link setattr create)))
        (dontaudit crond_t unconfined_cronjob_t (fd (use)))
        (dontaudit crond_t unconfined_cronjob_t (process (transition)))
    )
    (false
        (allow crond_t cronjob_t (key (view read write search link setattr create)))
        (allow crond_t cronjob_t (fd (use)))
        (allow crond_t cronjob_t (process (transition)))
        (allow cronjob_t user_cron_spool_t (file (entrypoint)))
        (allow cronjob_t crond_t (process (sigchld)))
        (allow cronjob_t crond_t (fifo_file (ioctl read write getattr lock append open)))
        (allow cronjob_t crond_t (fd (use)))
        (allow crond_t unconfined_cronjob_t (key (view read write search link setattr create)))
        (allow crond_t unconfined_cronjob_t (fd (use)))
        (allow crond_t unconfined_cronjob_t (process (transition)))
    )
)
(booleanif (fcron_crond)
    (true
        (dontaudit crontab_domain crond_t (process (signal)))
        (allow admin_crontab_t self (process (setfscreate)))
        (typetransition crond_t var_run_t sock_file crond_runtime_t)
        (allow crond_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow crond_t var_run_t (lnk_file (read getattr)))
        (allow crond_t var_t (dir (getattr open search)))
        (allow crond_t crond_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow crond_t system_cron_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow crond_t user_cron_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
    )
)
(optional cron_optional_2
    (typeattributeset cil_gen_require init_t)
    (allow cronjob_t init_t (process (sigchld)))
    (allow cronjob_t init_t (process (signull)))
    (optional cron_optional_3
        (typeattributeset cil_gen_require rpm_t)
        (allow cronjob_t rpm_t (fd (use)))
        (allow cronjob_t rpm_t (fifo_file (ioctl read getattr lock open)))
    )
    (optional cron_optional_4
        (typeattributeset cil_gen_require security_t)
        (typeattributeset cil_gen_require sysfs_t)
        (dontaudit cronjob_t security_t (filesystem (getattr)))
        (dontaudit cronjob_t sysfs_t (filesystem (getattr)))
        (dontaudit cronjob_t sysfs_t (dir (getattr open search)))
        (dontaudit cronjob_t security_t (dir (getattr open search)))
        (dontaudit cronjob_t security_t (file (ioctl read getattr lock open)))
        (optional cron_optional_5
            (typeattributeset cil_gen_require selinux_config_t)
            (dontaudit cronjob_t selinux_config_t (dir (getattr open search)))
            (dontaudit cronjob_t selinux_config_t (file (ioctl read getattr lock open)))
            (optional cron_optional_6
                (typeattributeset cil_gen_require init_t)
                (allow crond_t init_t (process (sigchld)))
                (allow crond_t init_t (process (signull)))
                (optional cron_optional_7
                    (typeattributeset cil_gen_require rpm_t)
                    (allow crond_t rpm_t (fd (use)))
                    (allow crond_t rpm_t (fifo_file (ioctl read getattr lock open)))
                )
                (optional cron_optional_8
                    (typeattributeset cil_gen_require security_t)
                    (typeattributeset cil_gen_require sysfs_t)
                    (dontaudit crond_t security_t (filesystem (getattr)))
                    (dontaudit crond_t sysfs_t (filesystem (getattr)))
                    (dontaudit crond_t sysfs_t (dir (getattr open search)))
                    (dontaudit crond_t security_t (dir (getattr open search)))
                    (dontaudit crond_t security_t (file (ioctl read getattr lock open)))
                    (optional cron_optional_9
                        (typeattributeset cil_gen_require selinux_config_t)
                        (dontaudit crond_t selinux_config_t (dir (getattr open search)))
                        (dontaudit crond_t selinux_config_t (file (ioctl read getattr lock open)))
                        (optional cron_optional_10
                            (typeattributeset cil_gen_require init_t)
                            (allow admin_crontab_t init_t (process (sigchld)))
                            (allow admin_crontab_t init_t (process (signull)))
                            (optional cron_optional_11
                                (typeattributeset cil_gen_require rpm_t)
                                (allow admin_crontab_t rpm_t (fd (use)))
                                (allow admin_crontab_t rpm_t (fifo_file (ioctl read getattr lock open)))
                            )
                            (optional cron_optional_12
                                (typeattributeset cil_gen_require security_t)
                                (typeattributeset cil_gen_require sysfs_t)
                                (dontaudit admin_crontab_t security_t (filesystem (getattr)))
                                (dontaudit admin_crontab_t sysfs_t (filesystem (getattr)))
                                (dontaudit admin_crontab_t sysfs_t (dir (getattr open search)))
                                (dontaudit admin_crontab_t security_t (dir (getattr open search)))
                                (dontaudit admin_crontab_t security_t (file (ioctl read getattr lock open)))
                                (optional cron_optional_13
                                    (typeattributeset cil_gen_require selinux_config_t)
                                    (dontaudit admin_crontab_t selinux_config_t (dir (getattr open search)))
                                    (dontaudit admin_crontab_t selinux_config_t (file (ioctl read getattr lock open)))
                                    (optional cron_optional_14
                                        (typeattributeset cil_gen_require krb5_keytab_t)
                                        (typeattributeset cil_gen_require etc_t)
                                        (allow admin_crontab_t etc_t (dir (getattr open search)))
                                        (allow admin_crontab_t krb5_keytab_t (file (ioctl read getattr lock open)))
                                    )
                                    (optional cron_optional_15
                                        (typeattributeset cil_gen_require var_t)
                                        (typeattributeset cil_gen_require pcscd_runtime_t)
                                        (typeattributeset cil_gen_require var_run_t)
                                        (typeattributeset cil_gen_require pcscd_t)
                                        (allow admin_crontab_t var_run_t (lnk_file (read getattr)))
                                        (allow admin_crontab_t var_t (dir (getattr open search)))
                                        (allow admin_crontab_t var_run_t (dir (getattr open search)))
                                        (allow admin_crontab_t pcscd_runtime_t (dir (getattr open search)))
                                        (allow admin_crontab_t pcscd_runtime_t (file (ioctl read getattr lock open)))
                                        (allow admin_crontab_t var_run_t (lnk_file (read getattr)))
                                        (allow admin_crontab_t var_t (dir (getattr open search)))
                                        (allow admin_crontab_t var_run_t (dir (getattr open search)))
                                        (allow admin_crontab_t pcscd_runtime_t (dir (getattr open search)))
                                        (allow admin_crontab_t pcscd_runtime_t (sock_file (write getattr append open)))
                                        (allow admin_crontab_t pcscd_t (unix_stream_socket (connectto)))
                                        (allow pcscd_t admin_crontab_t (dir (ioctl read getattr lock open search)))
                                        (allow pcscd_t admin_crontab_t (file (ioctl read getattr lock open)))
                                    )
                                    (optional cron_optional_16
                                        (typeattributeset cil_gen_require init_t)
                                        (allow crontab_t init_t (process (sigchld)))
                                        (allow crontab_t init_t (process (signull)))
                                        (optional cron_optional_17
                                            (typeattributeset cil_gen_require rpm_t)
                                            (allow crontab_t rpm_t (fd (use)))
                                            (allow crontab_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                        )
                                        (optional cron_optional_18
                                            (typeattributeset cil_gen_require security_t)
                                            (typeattributeset cil_gen_require sysfs_t)
                                            (dontaudit crontab_t security_t (filesystem (getattr)))
                                            (dontaudit crontab_t sysfs_t (filesystem (getattr)))
                                            (dontaudit crontab_t sysfs_t (dir (getattr open search)))
                                            (dontaudit crontab_t security_t (dir (getattr open search)))
                                            (dontaudit crontab_t security_t (file (ioctl read getattr lock open)))
                                            (optional cron_optional_19
                                                (typeattributeset cil_gen_require selinux_config_t)
                                                (dontaudit crontab_t selinux_config_t (dir (getattr open search)))
                                                (dontaudit crontab_t selinux_config_t (file (ioctl read getattr lock open)))
                                                (optional cron_optional_20
                                                    (typeattributeset cil_gen_require krb5_keytab_t)
                                                    (typeattributeset cil_gen_require etc_t)
                                                    (allow crontab_t etc_t (dir (getattr open search)))
                                                    (allow crontab_t krb5_keytab_t (file (ioctl read getattr lock open)))
                                                )
                                                (optional cron_optional_21
                                                    (typeattributeset cil_gen_require var_t)
                                                    (typeattributeset cil_gen_require pcscd_runtime_t)
                                                    (typeattributeset cil_gen_require var_run_t)
                                                    (typeattributeset cil_gen_require pcscd_t)
                                                    (allow crontab_t var_run_t (lnk_file (read getattr)))
                                                    (allow crontab_t var_t (dir (getattr open search)))
                                                    (allow crontab_t var_run_t (dir (getattr open search)))
                                                    (allow crontab_t pcscd_runtime_t (dir (getattr open search)))
                                                    (allow crontab_t pcscd_runtime_t (file (ioctl read getattr lock open)))
                                                    (allow crontab_t var_run_t (lnk_file (read getattr)))
                                                    (allow crontab_t var_t (dir (getattr open search)))
                                                    (allow crontab_t var_run_t (dir (getattr open search)))
                                                    (allow crontab_t pcscd_runtime_t (dir (getattr open search)))
                                                    (allow crontab_t pcscd_runtime_t (sock_file (write getattr append open)))
                                                    (allow crontab_t pcscd_t (unix_stream_socket (connectto)))
                                                    (allow pcscd_t crontab_t (dir (ioctl read getattr lock open search)))
                                                    (allow pcscd_t crontab_t (file (ioctl read getattr lock open)))
                                                )
                                                (optional cron_optional_22
                                                    (typeattributeset cil_gen_require init_t)
                                                    (allow system_cronjob_t init_t (process (sigchld)))
                                                    (allow system_cronjob_t init_t (process (signull)))
                                                    (optional cron_optional_23
                                                        (typeattributeset cil_gen_require rpm_t)
                                                        (allow system_cronjob_t rpm_t (fd (use)))
                                                        (allow system_cronjob_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                    )
                                                    (optional cron_optional_24
                                                        (typeattributeset cil_gen_require security_t)
                                                        (typeattributeset cil_gen_require sysfs_t)
                                                        (dontaudit system_cronjob_t security_t (filesystem (getattr)))
                                                        (dontaudit system_cronjob_t sysfs_t (filesystem (getattr)))
                                                        (dontaudit system_cronjob_t sysfs_t (dir (getattr open search)))
                                                        (dontaudit system_cronjob_t security_t (dir (getattr open search)))
                                                        (dontaudit system_cronjob_t security_t (file (ioctl read getattr lock open)))
                                                        (optional cron_optional_25
                                                            (typeattributeset cil_gen_require selinux_config_t)
                                                            (dontaudit system_cronjob_t selinux_config_t (dir (getattr open search)))
                                                            (dontaudit system_cronjob_t selinux_config_t (file (ioctl read getattr lock open)))
                                                            (optional cron_optional_26
                                                                (typeattributeset cil_gen_require mailcontent_type)
                                                                (typeattributeset cil_gen_require mailcontent_type)
                                                                (typeattributeset mailcontent_type (cron_spool_t crond_runtime_t crond_tmp_t system_cron_spool_t user_cron_spool_t user_cron_spool_log_t ))
                                                            )
                                                            (optional cron_optional_27
                                                                (typeattributeset cil_gen_require krb5_keytab_t)
                                                                (typeattributeset cil_gen_require etc_t)
                                                                (allow crond_t etc_t (dir (getattr open search)))
                                                                (allow crond_t krb5_keytab_t (file (ioctl read getattr lock open)))
                                                            )
                                                            (optional cron_optional_28
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require pcscd_runtime_t)
                                                                (typeattributeset cil_gen_require var_run_t)
                                                                (typeattributeset cil_gen_require pcscd_t)
                                                                (allow crond_t var_run_t (lnk_file (read getattr)))
                                                                (allow crond_t var_t (dir (getattr open search)))
                                                                (allow crond_t var_run_t (dir (getattr open search)))
                                                                (allow crond_t pcscd_runtime_t (dir (getattr open search)))
                                                                (allow crond_t pcscd_runtime_t (file (ioctl read getattr lock open)))
                                                                (allow crond_t var_run_t (lnk_file (read getattr)))
                                                                (allow crond_t var_t (dir (getattr open search)))
                                                                (allow crond_t var_run_t (dir (getattr open search)))
                                                                (allow crond_t pcscd_runtime_t (dir (getattr open search)))
                                                                (allow crond_t pcscd_runtime_t (sock_file (write getattr append open)))
                                                                (allow crond_t pcscd_t (unix_stream_socket (connectto)))
                                                                (allow pcscd_t crond_t (dir (ioctl read getattr lock open search)))
                                                                (allow pcscd_t crond_t (file (ioctl read getattr lock open)))
                                                            )
                                                            (optional cron_optional_29
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require var_run_t)
                                                                (typeattributeset cil_gen_require var_lib_t)
                                                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                (typeattributeset cil_gen_require system_dbusd_t)
                                                                (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                                                (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                                                (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                                                (typeattributeset cil_gen_require dbusd_etc_t)
                                                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                (typeattributeset dbusd_system_bus_client (crond_t ))
                                                                (allow crond_t system_dbusd_t (dbus (send_msg)))
                                                                (allow crond_t self (dbus (send_msg)))
                                                                (allow system_dbusd_t crond_t (dbus (send_msg)))
                                                                (allow crond_t var_t (dir (getattr open search)))
                                                                (allow crond_t var_lib_t (dir (getattr open search)))
                                                                (allow crond_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                (allow crond_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                                                (allow crond_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                (allow crond_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                (allow crond_t session_dbusd_tmp_t (dir (getattr open search)))
                                                                (allow crond_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                                                (allow crond_t var_run_t (lnk_file (read getattr)))
                                                                (allow crond_t var_t (dir (getattr open search)))
                                                                (allow crond_t var_run_t (dir (getattr open search)))
                                                                (allow crond_t system_dbusd_runtime_t (dir (getattr open search)))
                                                                (allow crond_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                                                (allow crond_t system_dbusd_t (unix_stream_socket (connectto)))
                                                                (allow crond_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                                                (allow crond_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                                                (allow crond_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                (allow crond_t system_dbusd_runtime_t (sock_file (read)))
                                                                (allow crond_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                (allow crond_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                (optional cron_optional_30
                                                                    (typeattributeset cil_gen_require fprintd_t)
                                                                    (allow crond_t fprintd_t (dbus (send_msg)))
                                                                    (allow fprintd_t crond_t (dbus (send_msg)))
                                                                )
                                                                (optional cron_optional_31
                                                                    (typeattributeset cil_gen_require systemd_logind_t)
                                                                    (typeattributeset cil_gen_require systemd_sessions_runtime_t)
                                                                    (allow crond_t systemd_logind_t (dbus (send_msg)))
                                                                    (allow systemd_logind_t crond_t (dbus (send_msg)))
                                                                    (allow crond_t systemd_logind_t (fd (use)))
                                                                    (allow crond_t systemd_sessions_runtime_t (fifo_file (write)))
                                                                    (allow systemd_logind_t crond_t (process (signal)))
                                                                )
                                                            )
                                                            (optional cron_optional_32
                                                                (typeattributeset cil_gen_require tmp_t)
                                                                (typeattributeset cil_gen_require security_t)
                                                                (typeattributeset cil_gen_require sysfs_t)
                                                                (typeattributeset cil_gen_require selinux_config_t)
                                                                (typeattributeset cil_gen_require etc_t)
                                                                (typeattributeset cil_gen_require krb5_host_rcache_t)
                                                                (typeattributeset cil_gen_require can_change_object_identity)
                                                                (typeattributeset cil_gen_require default_context_t)
                                                                (typeattributeset cil_gen_require file_context_t)
                                                                (typeattributeset cil_gen_require krb5_conf_t)
                                                                (typeattributeset cil_gen_require krb5_home_t)
                                                                (typeattributeset cil_gen_require user_home_dir_t)
                                                                (typeattributeset cil_gen_require home_root_t)
                                                                (typeattributeset cil_gen_require can_change_object_identity)
                                                                (typeattributeset can_change_object_identity (crond_t ))
                                                                (allow crond_t etc_t (dir (getattr open search)))
                                                                (allow crond_t krb5_conf_t (file (ioctl read getattr lock open)))
                                                                (allow crond_t user_home_dir_t (dir (getattr open search)))
                                                                (allow crond_t home_root_t (dir (getattr open search)))
                                                                (allow crond_t home_root_t (lnk_file (read getattr)))
                                                                (allow crond_t krb5_home_t (file (ioctl read getattr lock open)))
                                                                (booleanif (allow_kerberos)
                                                                    (true
                                                                        (allow crond_t krb5_host_rcache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                                        (allow crond_t tmp_t (dir (getattr open search)))
                                                                        (allow crond_t file_context_t (file (map)))
                                                                        (allow crond_t file_context_t (file (ioctl read getattr lock open)))
                                                                        (allow crond_t file_context_t (dir (getattr open search)))
                                                                        (allow crond_t selinux_config_t (dir (getattr open search)))
                                                                        (allow crond_t default_context_t (dir (getattr open search)))
                                                                        (allow crond_t etc_t (dir (getattr open search)))
                                                                        (allow crond_t security_t (security (check_context)))
                                                                        (allow crond_t security_t (file (ioctl read write getattr map open)))
                                                                        (allow crond_t security_t (dir (ioctl read getattr lock open search)))
                                                                        (allow crond_t sysfs_t (dir (getattr open search)))
                                                                        (allow crond_t sysfs_t (dir (getattr open search)))
                                                                        (allow crond_t self (process (setfscreate)))
                                                                    )
                                                                )
                                                            )
                                                            (optional cron_optional_33
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require httpd_sys_content_t)
                                                                (allow crond_t var_t (dir (getattr open search)))
                                                                (allow crond_t httpd_sys_content_t (dir (getattr open search)))
                                                            )
                                                            (optional cron_optional_34
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require var_run_t)
                                                                (typeattributeset cil_gen_require var_lib_t)
                                                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                (typeattributeset cil_gen_require system_dbusd_t)
                                                                (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                                                (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                                                (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                                                (typeattributeset cil_gen_require dbusd_etc_t)
                                                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                (typeattributeset dbusd_system_bus_client (crond_t ))
                                                                (allow crond_t system_dbusd_t (dbus (send_msg)))
                                                                (allow crond_t self (dbus (send_msg)))
                                                                (allow system_dbusd_t crond_t (dbus (send_msg)))
                                                                (allow crond_t var_t (dir (getattr open search)))
                                                                (allow crond_t var_lib_t (dir (getattr open search)))
                                                                (allow crond_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                (allow crond_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                                                (allow crond_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                (allow crond_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                (allow crond_t session_dbusd_tmp_t (dir (getattr open search)))
                                                                (allow crond_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                                                (allow crond_t var_run_t (lnk_file (read getattr)))
                                                                (allow crond_t var_t (dir (getattr open search)))
                                                                (allow crond_t var_run_t (dir (getattr open search)))
                                                                (allow crond_t system_dbusd_runtime_t (dir (getattr open search)))
                                                                (allow crond_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                                                (allow crond_t system_dbusd_t (unix_stream_socket (connectto)))
                                                                (allow crond_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                                                (allow crond_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                                                (allow crond_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                (allow crond_t system_dbusd_runtime_t (sock_file (read)))
                                                                (allow crond_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                (allow crond_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                (optional cron_optional_35
                                                                    (typeattributeset cil_gen_require init_t)
                                                                    (allow crond_t init_t (dbus (send_msg)))
                                                                    (allow init_t crond_t (dbus (send_msg)))
                                                                    (optional cron_optional_36
                                                                        (typeattributeset cil_gen_require unconfined_t)
                                                                        (allow crond_t unconfined_t (dbus (send_msg)))
                                                                    )
                                                                )
                                                            )
                                                            (optional cron_optional_37
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require var_lib_t)
                                                                (typeattributeset cil_gen_require amanda_var_lib_t)
                                                                (allow crond_t var_t (dir (getattr open search)))
                                                                (allow crond_t var_lib_t (dir (getattr open search)))
                                                                (allow crond_t amanda_var_lib_t (dir (getattr open search)))
                                                            )
                                                            (optional cron_optional_38
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require var_lib_t)
                                                                (typeattributeset cil_gen_require amavis_var_lib_t)
                                                                (allow crond_t amavis_var_lib_t (dir (getattr open search)))
                                                                (allow crond_t var_t (dir (getattr open search)))
                                                                (allow crond_t var_lib_t (dir (getattr open search)))
                                                            )
                                                            (optional cron_optional_39
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require backup_store_t)
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t backup_store_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                (allow system_cronjob_t backup_store_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                            )
                                                            (optional cron_optional_40
                                                                (typeattributeset cil_gen_require djbdns_tinydns_t)
                                                                (allow crond_t djbdns_tinydns_t (key (search)))
                                                                (allow crond_t djbdns_tinydns_t (key (link)))
                                                            )
                                                            (optional cron_optional_41
                                                                (typeattributeset cil_gen_require local_login_t)
                                                                (allow crond_t local_login_t (key (search)))
                                                                (allow crond_t local_login_t (key (link)))
                                                            )
                                                            (optional cron_optional_42
                                                                (typeattributeset cil_gen_require bin_t)
                                                                (typeattributeset cil_gen_require usr_t)
                                                                (typeattributeset cil_gen_require system_mail_t)
                                                                (typeattributeset cil_gen_require mta_exec_type)
                                                                (typeattributeset cil_gen_require mta_user_agent)
                                                                (allow crond_t bin_t (dir (getattr open search)))
                                                                (allow crond_t bin_t (lnk_file (read getattr)))
                                                                (allow crond_t usr_t (dir (getattr open search)))
                                                                (allow crond_t mta_exec_type (file (ioctl read getattr map execute open)))
                                                                (allow crond_t system_mail_t (process (transition)))
                                                                (dontaudit crond_t system_mail_t (process (noatsecure siginh rlimitinh)))
                                                                (typetransition crond_t mta_exec_type process system_mail_t)
                                                                (allow system_mail_t crond_t (fd (use)))
                                                                (allow system_mail_t crond_t (fifo_file (ioctl read write getattr lock append)))
                                                                (allow system_mail_t crond_t (process (sigchld)))
                                                                (allow crond_t mta_exec_type (lnk_file (read getattr)))
                                                                (dontaudit mta_user_agent crond_t (fd (use)))
                                                            )
                                                            (optional cron_optional_43
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require var_lib_t)
                                                                (typeattributeset cil_gen_require munin_var_lib_t)
                                                                (allow crond_t munin_var_lib_t (dir (getattr open search)))
                                                                (allow crond_t var_t (dir (getattr open search)))
                                                                (allow crond_t var_lib_t (dir (getattr open search)))
                                                            )
                                                            (optional cron_optional_44
                                                                (typeattributeset cil_gen_require postgresql_db_t)
                                                                (allow crond_t postgresql_db_t (dir (search)))
                                                            )
                                                            (optional cron_optional_45
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require var_lib_t)
                                                                (typeattributeset cil_gen_require var_lib_nfs_t)
                                                                (allow crond_t var_t (dir (getattr open search)))
                                                                (allow crond_t var_lib_t (dir (getattr open search)))
                                                                (allow crond_t var_lib_nfs_t (dir (search)))
                                                            )
                                                            (optional cron_optional_46
                                                                (typeattributeset cil_gen_require rpm_t)
                                                                (allow crond_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                            )
                                                            (optional cron_optional_47
                                                                (typeattributeset cil_gen_require newrole_t)
                                                                (allow crond_t newrole_t (process (sigchld)))
                                                            )
                                                            (optional cron_optional_48
                                                                (typeattributeset cil_gen_require systemd_logind_t)
                                                                (typeattributeset cil_gen_require systemd_sessions_runtime_t)
                                                                (allow crond_t systemd_logind_t (dbus (send_msg)))
                                                                (allow systemd_logind_t crond_t (dbus (send_msg)))
                                                                (allow crond_t systemd_logind_t (fd (use)))
                                                                (allow crond_t systemd_sessions_runtime_t (fifo_file (write)))
                                                                (allow systemd_logind_t crond_t (process (signal)))
                                                                (optional cron_optional_49
                                                                    (typeattributeset cil_gen_require init_t)
                                                                    (typeattributeset cil_gen_require var_t)
                                                                    (typeattributeset cil_gen_require var_run_t)
                                                                    (typeattributeset cil_gen_require init_runtime_t)
                                                                    (typeattributeset cil_gen_require initrc_exec_t)
                                                                    (typeattributeset cil_gen_require systemd_logind_t)
                                                                    (typeattributeset cil_gen_require systemd_sessions_runtime_t)
                                                                    (typeattributeset cil_gen_require systemd_journal_t)
                                                                    (allow crond_t init_t (dbus (send_msg)))
                                                                    (allow init_t crond_t (dbus (send_msg)))
                                                                    (allow system_cronjob_t init_t (dbus (send_msg)))
                                                                    (allow init_t system_cronjob_t (dbus (send_msg)))
                                                                    (allow system_cronjob_t systemd_logind_t (dbus (send_msg)))
                                                                    (allow systemd_logind_t system_cronjob_t (dbus (send_msg)))
                                                                    (allow system_cronjob_t systemd_journal_t (dir (getattr open search)))
                                                                    (allow system_cronjob_t systemd_journal_t (dir (ioctl read getattr lock open search)))
                                                                    (allow system_cronjob_t systemd_journal_t (dir (getattr open search)))
                                                                    (allow system_cronjob_t systemd_journal_t (file (ioctl read getattr map open)))
                                                                    (allow system_cronjob_t systemd_logind_t (fd (use)))
                                                                    (allow system_cronjob_t systemd_sessions_runtime_t (fifo_file (write)))
                                                                    (allow systemd_logind_t system_cronjob_t (process (signal)))
                                                                    (allow system_cronjob_t init_t (key (search)))
                                                                    (allow system_cronjob_t init_runtime_t (dir (getattr open search)))
                                                                    (allow system_cronjob_t init_runtime_t (sock_file (write getattr append open)))
                                                                    (allow system_cronjob_t init_t (unix_stream_socket (connectto)))
                                                                    (allow system_cronjob_t var_run_t (lnk_file (read getattr)))
                                                                    (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                    (allow system_cronjob_t var_run_t (dir (getattr open search)))
                                                                    (allow system_cronjob_t init_t (unix_stream_socket (getattr)))
                                                                    (allow system_cronjob_t initrc_exec_t (service (stop start status)))
                                                                )
                                                            )
                                                            (optional cron_optional_50
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require acct_data_t)
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t acct_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                (allow system_cronjob_t acct_data_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                                (allow system_cronjob_t acct_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                (allow system_cronjob_t acct_data_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                                                            )
                                                            (optional cron_optional_51
                                                                (typeattributeset cil_gen_require var_log_t)
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require etc_t)
                                                                (typeattributeset cil_gen_require var_lib_t)
                                                                (typeattributeset cil_gen_require httpd_sys_content_t)
                                                                (typeattributeset cil_gen_require httpd_modules_t)
                                                                (typeattributeset cil_gen_require httpd_config_t)
                                                                (typeattributeset cil_gen_require httpd_log_t)
                                                                (typeattributeset cil_gen_require httpd_var_lib_t)
                                                                (typeattributeset cil_gen_require squirrelmail_spool_t)
                                                                (allow system_cronjob_t httpd_modules_t (dir (ioctl read getattr lock open search)))
                                                                (allow system_cronjob_t httpd_modules_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t httpd_modules_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                                                                (allow system_cronjob_t etc_t (dir (getattr open search)))
                                                                (allow system_cronjob_t httpd_config_t (dir (ioctl read getattr lock open search)))
                                                                (allow system_cronjob_t httpd_config_t (dir (getattr open search)))
                                                                (allow system_cronjob_t httpd_config_t (file (ioctl read getattr lock open)))
                                                                (allow system_cronjob_t httpd_config_t (dir (getattr open search)))
                                                                (allow system_cronjob_t httpd_config_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_log_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_log_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t httpd_log_t (dir (ioctl read getattr lock open search)))
                                                                (allow system_cronjob_t httpd_log_t (dir (getattr open search)))
                                                                (allow system_cronjob_t httpd_log_t (file (ioctl read getattr lock open)))
                                                                (allow system_cronjob_t httpd_log_t (dir (getattr open search)))
                                                                (allow system_cronjob_t httpd_log_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t httpd_sys_content_t (dir (ioctl read getattr lock open search)))
                                                                (allow system_cronjob_t httpd_sys_content_t (dir (getattr open search)))
                                                                (allow system_cronjob_t httpd_sys_content_t (file (ioctl read getattr lock open)))
                                                                (allow system_cronjob_t httpd_sys_content_t (dir (getattr open search)))
                                                                (allow system_cronjob_t httpd_sys_content_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_lib_t (dir (getattr open search)))
                                                                (allow system_cronjob_t httpd_var_lib_t (dir (ioctl write getattr lock open remove_name search)))
                                                                (allow system_cronjob_t httpd_var_lib_t (file (getattr unlink)))
                                                                (allow system_cronjob_t squirrelmail_spool_t (dir (ioctl write getattr lock open remove_name search)))
                                                                (allow system_cronjob_t squirrelmail_spool_t (file (getattr unlink)))
                                                            )
                                                            (optional cron_optional_52
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require var_lib_t)
                                                                (typeattributeset cil_gen_require cyrus_var_lib_t)
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_lib_t (dir (getattr open search)))
                                                                (allow system_cronjob_t cyrus_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                (allow system_cronjob_t cyrus_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                            )
                                                            (optional cron_optional_53
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require var_run_t)
                                                                (typeattributeset cil_gen_require var_lib_t)
                                                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                (typeattributeset cil_gen_require system_dbusd_t)
                                                                (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                                                (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                                                (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                                                (typeattributeset cil_gen_require dbusd_etc_t)
                                                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                (typeattributeset dbusd_system_bus_client (system_cronjob_t ))
                                                                (allow system_cronjob_t system_dbusd_t (dbus (send_msg)))
                                                                (allow system_cronjob_t self (dbus (send_msg)))
                                                                (allow system_dbusd_t system_cronjob_t (dbus (send_msg)))
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_lib_t (dir (getattr open search)))
                                                                (allow system_cronjob_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                (allow system_cronjob_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                                                (allow system_cronjob_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                (allow system_cronjob_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t session_dbusd_tmp_t (dir (getattr open search)))
                                                                (allow system_cronjob_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                                                (allow system_cronjob_t var_run_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_run_t (dir (getattr open search)))
                                                                (allow system_cronjob_t system_dbusd_runtime_t (dir (getattr open search)))
                                                                (allow system_cronjob_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                                                (allow system_cronjob_t system_dbusd_t (unix_stream_socket (connectto)))
                                                                (allow system_cronjob_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                                                (allow system_cronjob_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                                                (allow system_cronjob_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                (allow system_cronjob_t system_dbusd_runtime_t (sock_file (read)))
                                                                (allow system_cronjob_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                (allow system_cronjob_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                (optional cron_optional_54
                                                                    (typeattributeset cil_gen_require NetworkManager_t)
                                                                    (allow system_cronjob_t NetworkManager_t (dbus (send_msg)))
                                                                    (allow NetworkManager_t system_cronjob_t (dbus (send_msg)))
                                                                )
                                                            )
                                                            (optional cron_optional_55
                                                                (typeattributeset cil_gen_require var_log_t)
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require var_run_t)
                                                                (typeattributeset cil_gen_require devicekit_runtime_t)
                                                                (typeattributeset cil_gen_require devicekit_var_log_t)
                                                                (typeattributeset cil_gen_require devicekit_power_t)
                                                                (allow system_cronjob_t var_run_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_run_t (dir (getattr open search)))
                                                                (allow system_cronjob_t devicekit_runtime_t (dir (getattr open search)))
                                                                (allow system_cronjob_t devicekit_runtime_t (file (ioctl read getattr lock open)))
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_log_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_log_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t devicekit_var_log_t (file (getattr append)))
                                                                (allow system_cronjob_t devicekit_power_t (fd (use)))
                                                            )
                                                            (optional cron_optional_56
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require var_spool_t)
                                                                (typeattributeset cil_gen_require exim_spool_t)
                                                                (allow system_cronjob_t exim_spool_t (file (ioctl read getattr lock open)))
                                                                (allow system_cronjob_t exim_spool_t (dir (ioctl read getattr lock open search)))
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_spool_t (dir (getattr open search)))
                                                            )
                                                            (optional cron_optional_57
                                                                (typeattributeset cil_gen_require var_log_t)
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require xferlog_t)
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_log_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_log_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t xferlog_t (file (ioctl read getattr lock open)))
                                                            )
                                                            (optional cron_optional_58
                                                                (typeattributeset cil_gen_require bin_t)
                                                                (typeattributeset cil_gen_require usr_t)
                                                                (typeattributeset cil_gen_require gpg_exec_t)
                                                                (allow system_cronjob_t bin_t (dir (getattr open search)))
                                                                (allow system_cronjob_t bin_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t usr_t (dir (getattr open search)))
                                                                (allow system_cronjob_t gpg_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                                                            )
                                                            (optional cron_optional_59
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require var_run_t)
                                                                (typeattributeset cil_gen_require innd_log_t)
                                                                (typeattributeset cil_gen_require innd_runtime_t)
                                                                (typeattributeset cil_gen_require innd_etc_t)
                                                                (allow system_cronjob_t innd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                (allow system_cronjob_t innd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                                (allow system_cronjob_t var_run_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_run_t (dir (getattr open search)))
                                                                (allow system_cronjob_t innd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                                                (allow system_cronjob_t var_run_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_run_t (dir (getattr open search)))
                                                                (allow system_cronjob_t innd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                                (allow system_cronjob_t var_run_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_run_t (dir (getattr open search)))
                                                                (allow system_cronjob_t innd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                                (allow system_cronjob_t innd_etc_t (dir (ioctl read getattr lock open search)))
                                                                (allow system_cronjob_t innd_etc_t (file (ioctl read getattr lock open)))
                                                                (allow system_cronjob_t innd_etc_t (lnk_file (read getattr)))
                                                            )
                                                            (optional cron_optional_60
                                                                (typeattributeset cil_gen_require tmp_t)
                                                                (typeattributeset cil_gen_require livecd_tmp_t)
                                                                (allow system_cronjob_t tmp_t (dir (getattr open search)))
                                                                (allow system_cronjob_t livecd_tmp_t (dir (getattr open search)))
                                                                (allow system_cronjob_t livecd_tmp_t (file (ioctl read getattr lock open)))
                                                            )
                                                            (optional cron_optional_61
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require var_spool_t)
                                                                (typeattributeset cil_gen_require print_spool_t)
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_spool_t (dir (getattr open search)))
                                                                (allow system_cronjob_t print_spool_t (dir (ioctl read getattr lock open search)))
                                                            )
                                                            (optional cron_optional_62
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require var_run_t)
                                                                (typeattributeset cil_gen_require lib_t)
                                                                (typeattributeset cil_gen_require mailman_queue_exec_t)
                                                                (typeattributeset cil_gen_require mailman_queue_t)
                                                                (typeattributeset cil_gen_require mailman_runtime_t)
                                                                (allow system_cronjob_t lib_t (dir (getattr open search)))
                                                                (allow system_cronjob_t mailman_queue_exec_t (file (ioctl read getattr map execute open)))
                                                                (allow system_cronjob_t mailman_queue_t (process (transition)))
                                                                (dontaudit system_cronjob_t mailman_queue_t (process (noatsecure siginh rlimitinh)))
                                                                (typetransition system_cronjob_t mailman_queue_exec_t process mailman_queue_t)
                                                                (allow mailman_queue_t system_cronjob_t (fd (use)))
                                                                (allow mailman_queue_t system_cronjob_t (fifo_file (ioctl read write getattr lock append)))
                                                                (allow mailman_queue_t system_cronjob_t (process (sigchld)))
                                                                (allow system_cronjob_t var_run_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_run_t (dir (getattr open search)))
                                                                (allow system_cronjob_t mailman_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                (allow system_cronjob_t mailman_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                            )
                                                            (optional cron_optional_63
                                                                (typeattributeset cil_gen_require var_log_t)
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require mrtg_log_t)
                                                                (typeattributeset cil_gen_require mrtg_etc_t)
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_log_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_log_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t mrtg_log_t (dir (getattr open search)))
                                                                (allow system_cronjob_t mrtg_log_t (file (ioctl getattr lock append open)))
                                                                (allow system_cronjob_t mrtg_log_t (dir (ioctl write getattr lock open add_name search)))
                                                                (allow system_cronjob_t mrtg_log_t (file (create getattr open)))
                                                                (allow system_cronjob_t mrtg_etc_t (file (ioctl read getattr lock open)))
                                                            )
                                                            (optional cron_optional_64
                                                                (typeattributeset cil_gen_require bin_t)
                                                                (typeattributeset cil_gen_require usr_t)
                                                                (typeattributeset cil_gen_require etc_t)
                                                                (typeattributeset cil_gen_require system_mail_t)
                                                                (typeattributeset cil_gen_require mta_exec_type)
                                                                (typeattributeset cil_gen_require mta_user_agent)
                                                                (typeattributeset cil_gen_require etc_mail_t)
                                                                (allow system_cronjob_t etc_t (dir (getattr open search)))
                                                                (allow system_cronjob_t etc_mail_t (dir (ioctl read getattr lock open search)))
                                                                (allow system_cronjob_t etc_mail_t (file (ioctl read getattr lock open)))
                                                                (allow system_cronjob_t etc_mail_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t bin_t (dir (getattr open search)))
                                                                (allow system_cronjob_t bin_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t usr_t (dir (getattr open search)))
                                                                (allow system_cronjob_t mta_exec_type (file (ioctl read getattr map execute open)))
                                                                (allow system_cronjob_t system_mail_t (process (transition)))
                                                                (dontaudit system_cronjob_t system_mail_t (process (noatsecure siginh rlimitinh)))
                                                                (typetransition system_cronjob_t mta_exec_type process system_mail_t)
                                                                (allow system_mail_t system_cronjob_t (fd (use)))
                                                                (allow system_mail_t system_cronjob_t (fifo_file (ioctl read write getattr lock append)))
                                                                (allow system_mail_t system_cronjob_t (process (sigchld)))
                                                                (allow system_cronjob_t mta_exec_type (lnk_file (read getattr)))
                                                                (dontaudit mta_user_agent system_cronjob_t (fd (use)))
                                                            )
                                                            (optional cron_optional_65
                                                                (typeattributeset cil_gen_require etc_t)
                                                                (typeattributeset cil_gen_require mysqld_etc_t)
                                                                (allow system_cronjob_t etc_t (dir (getattr open search)))
                                                                (allow system_cronjob_t mysqld_etc_t (dir (ioctl read getattr lock open search)))
                                                                (allow system_cronjob_t mysqld_etc_t (file (ioctl read getattr lock open)))
                                                                (allow system_cronjob_t mysqld_etc_t (lnk_file (read getattr)))
                                                            )
                                                            (optional cron_optional_66
                                                                (typeattributeset cil_gen_require ntp_conf_t)
                                                                (allow system_cronjob_t ntp_conf_t (file (ioctl read getattr lock open)))
                                                            )
                                                            (optional cron_optional_67
                                                                (typeattributeset cil_gen_require etc_t)
                                                                (typeattributeset cil_gen_require postfix_etc_t)
                                                                (allow system_cronjob_t etc_t (dir (getattr open search)))
                                                                (allow system_cronjob_t postfix_etc_t (dir (ioctl read getattr lock open search)))
                                                                (allow system_cronjob_t postfix_etc_t (file (ioctl read getattr lock open)))
                                                                (allow system_cronjob_t postfix_etc_t (lnk_file (read getattr)))
                                                            )
                                                            (optional cron_optional_68
                                                                (typeattributeset cil_gen_require var_log_t)
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require etc_t)
                                                                (typeattributeset cil_gen_require samba_etc_t)
                                                                (typeattributeset cil_gen_require samba_log_t)
                                                                (allow system_cronjob_t etc_t (dir (getattr open search)))
                                                                (allow system_cronjob_t samba_etc_t (dir (getattr open search)))
                                                                (allow system_cronjob_t samba_etc_t (file (ioctl read getattr lock open)))
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_log_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_log_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t samba_log_t (dir (ioctl read getattr lock open search)))
                                                                (allow system_cronjob_t samba_log_t (dir (getattr open search)))
                                                                (allow system_cronjob_t samba_log_t (file (ioctl read getattr lock open)))
                                                            )
                                                            (optional cron_optional_69
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require var_lib_t)
                                                                (typeattributeset cil_gen_require spamd_var_lib_t)
                                                                (typeattributeset cil_gen_require spamassassin_unit_t)
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_lib_t (dir (getattr open search)))
                                                                (allow system_cronjob_t spamd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                (allow system_cronjob_t spamd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                                (allow system_cronjob_t spamassassin_unit_t (service (status)))
                                                                (allow system_cronjob_t spamassassin_unit_t (service (reload)))
                                                            )
                                                            (optional cron_optional_70
                                                                (typeattributeset cil_gen_require var_log_t)
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require sysstat_log_t)
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_log_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_log_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t sysstat_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                (allow system_cronjob_t sysstat_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                            )
                                                            (optional cron_optional_71
                                                                (typeattributeset cil_gen_require tmp_t)
                                                                (typeattributeset cil_gen_require var_t)
                                                                (typeattributeset cil_gen_require var_run_t)
                                                                (typeattributeset cil_gen_require user_tmp_t)
                                                                (typeattributeset cil_gen_require user_runtime_t)
                                                                (typeattributeset cil_gen_require user_runtime_root_t)
                                                                (typeattributeset cil_gen_require user_home_dir_t)
                                                                (typeattributeset cil_gen_require home_root_t)
                                                                (typeattributeset cil_gen_require user_home_t)
                                                                (allow system_cronjob_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                (typetransition system_cronjob_t user_home_dir_t fifo_file user_home_t)
                                                                (typetransition system_cronjob_t user_home_dir_t sock_file user_home_t)
                                                                (typetransition system_cronjob_t user_home_dir_t lnk_file user_home_t)
                                                                (typetransition system_cronjob_t user_home_dir_t dir user_home_t)
                                                                (typetransition system_cronjob_t user_home_dir_t file user_home_t)
                                                                (allow system_cronjob_t home_root_t (dir (getattr open search)))
                                                                (allow system_cronjob_t home_root_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t user_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                                                (allow system_cronjob_t user_runtime_root_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_run_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_run_t (dir (getattr open search)))
                                                                (allow system_cronjob_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                (allow system_cronjob_t user_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                                                (allow system_cronjob_t tmp_t (dir (getattr open search)))
                                                                (allow system_cronjob_t user_runtime_t (dir (getattr open search)))
                                                                (allow system_cronjob_t user_runtime_root_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_run_t (lnk_file (read getattr)))
                                                                (allow system_cronjob_t var_t (dir (getattr open search)))
                                                                (allow system_cronjob_t var_run_t (dir (getattr open search)))
                                                                (optional cron_optional_72
                                                                    (typeattributeset cil_gen_require var_t)
                                                                    (typeattributeset cil_gen_require etc_t)
                                                                    (typeattributeset cil_gen_require var_run_t)
                                                                    (typeattributeset cil_gen_require netlabel_peer_t)
                                                                    (typeattributeset cil_gen_require netif_t)
                                                                    (typeattributeset cil_gen_require node_t)
                                                                    (typeattributeset cil_gen_require port_type)
                                                                    (typeattributeset cil_gen_require var_yp_t)
                                                                    (typeattributeset cil_gen_require port_t)
                                                                    (typeattributeset cil_gen_require defined_port_type)
                                                                    (typeattributeset cil_gen_require reserved_port_type)
                                                                    (typeattributeset cil_gen_require portmap_port_t)
                                                                    (typeattributeset cil_gen_require reserved_port_t)
                                                                    (typeattributeset cil_gen_require portmap_client_packet_t)
                                                                    (typeattributeset cil_gen_require client_packet_t)
                                                                    (typeattributeset cil_gen_require server_packet_t)
                                                                    (typeattributeset cil_gen_require net_conf_t)
                                                                    (booleanif (allow_ypbind)
                                                                        (true
                                                                            (allow cronjob_t net_conf_t (lnk_file (read getattr)))
                                                                            (allow cronjob_t net_conf_t (file (ioctl read getattr lock open)))
                                                                            (allow cronjob_t net_conf_t (dir (ioctl read getattr lock open search)))
                                                                            (allow cronjob_t var_run_t (dir (getattr open search)))
                                                                            (allow cronjob_t var_t (dir (getattr open search)))
                                                                            (allow cronjob_t var_run_t (lnk_file (read getattr)))
                                                                            (allow cronjob_t etc_t (dir (getattr open search)))
                                                                            (allow cronjob_t server_packet_t (packet (recv)))
                                                                            (allow cronjob_t server_packet_t (packet (send)))
                                                                            (allow cronjob_t client_packet_t (packet (recv)))
                                                                            (allow cronjob_t client_packet_t (packet (send)))
                                                                            (allow cronjob_t portmap_client_packet_t (packet (recv)))
                                                                            (allow cronjob_t portmap_client_packet_t (packet (send)))
                                                                            (dontaudit cronjob_t port_type (tcp_socket (name_connect)))
                                                                            (allow cronjob_t port_t (tcp_socket (name_connect)))
                                                                            (allow cronjob_t reserved_port_t (tcp_socket (name_connect)))
                                                                            (allow cronjob_t portmap_port_t (tcp_socket (name_connect)))
                                                                            (dontaudit cronjob_t port_type (udp_socket (name_bind)))
                                                                            (dontaudit cronjob_t port_type (tcp_socket (name_bind)))
                                                                            (dontaudit cronjob_t reserved_port_type (udp_socket (name_bind)))
                                                                            (dontaudit cronjob_t reserved_port_type (tcp_socket (name_bind)))
                                                                            (dontaudit cronjob_t defined_port_type (udp_socket (name_bind)))
                                                                            (allow cronjob_t port_t (udp_socket (name_bind)))
                                                                            (dontaudit cronjob_t defined_port_type (tcp_socket (name_bind)))
                                                                            (allow cronjob_t port_t (tcp_socket (name_bind)))
                                                                            (allow cronjob_t node_t (udp_socket (node_bind)))
                                                                            (allow cronjob_t node_t (tcp_socket (node_bind)))
                                                                            (allow cronjob_t node_t (node (recvfrom)))
                                                                            (allow cronjob_t node_t (node (sendto)))
                                                                            (allow cronjob_t node_t (node (recvfrom sendto)))
                                                                            (allow cronjob_t netif_t (netif (ingress)))
                                                                            (allow cronjob_t netif_t (netif (egress)))
                                                                            (allow cronjob_t netif_t (netif (ingress egress)))
                                                                            (allow cronjob_t netlabel_peer_t (tcp_socket (recvfrom)))
                                                                            (allow cronjob_t netlabel_peer_t (udp_socket (recvfrom)))
                                                                            (allow cronjob_t netlabel_peer_t (rawip_socket (recvfrom)))
                                                                            (allow cronjob_t netlabel_peer_t (peer (recv)))
                                                                            (allow cronjob_t var_yp_t (lnk_file (read getattr)))
                                                                            (allow cronjob_t var_yp_t (file (ioctl read getattr lock open)))
                                                                            (allow cronjob_t var_yp_t (dir (ioctl read getattr lock open search)))
                                                                            (allow cronjob_t self (udp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                                                                            (allow cronjob_t self (tcp_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                                                            (allow cronjob_t self (capability (net_bind_service)))
                                                                        )
                                                                    )
                                                                )
                                                                (optional cron_optional_73
                                                                    (typeattributeset cil_gen_require init_t)
                                                                    (allow unconfined_cronjob_t init_t (process (sigchld)))
                                                                    (allow unconfined_cronjob_t init_t (process (signull)))
                                                                    (optional cron_optional_74
                                                                        (typeattributeset cil_gen_require rpm_t)
                                                                        (allow unconfined_cronjob_t rpm_t (fd (use)))
                                                                        (allow unconfined_cronjob_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                    )
                                                                    (optional cron_optional_75
                                                                        (typeattributeset cil_gen_require security_t)
                                                                        (typeattributeset cil_gen_require sysfs_t)
                                                                        (dontaudit unconfined_cronjob_t security_t (filesystem (getattr)))
                                                                        (dontaudit unconfined_cronjob_t sysfs_t (filesystem (getattr)))
                                                                        (dontaudit unconfined_cronjob_t sysfs_t (dir (getattr open search)))
                                                                        (dontaudit unconfined_cronjob_t security_t (dir (getattr open search)))
                                                                        (dontaudit unconfined_cronjob_t security_t (file (ioctl read getattr lock open)))
                                                                        (optional cron_optional_76
                                                                            (typeattributeset cil_gen_require selinux_config_t)
                                                                            (dontaudit unconfined_cronjob_t selinux_config_t (dir (getattr open search)))
                                                                            (dontaudit unconfined_cronjob_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                            (optional cron_optional_77
                                                                                (typeattributeset cil_gen_require domain)
                                                                                (typeattributeset domain (cronjob_t crond_t admin_crontab_t crontab_t system_cronjob_t unconfined_cronjob_t ))
                                                                                (typeattributeset cil_gen_require etc_t)
                                                                                (typeattributeset cil_gen_require can_change_object_identity)
                                                                                (typeattributeset cil_gen_require unconfined_t)
                                                                                (typeattributeset cil_gen_require kern_unconfined)
                                                                                (typeattributeset cil_gen_require can_load_kernmodule)
                                                                                (typeattributeset cil_gen_require corenet_unconfined_type)
                                                                                (typeattributeset cil_gen_require devices_unconfined_type)
                                                                                (typeattributeset cil_gen_require set_curr_context)
                                                                                (typeattributeset cil_gen_require unconfined_domain_type)
                                                                                (typeattributeset cil_gen_require process_uncond_exempt)
                                                                                (typeattributeset cil_gen_require files_unconfined_type)
                                                                                (typeattributeset cil_gen_require filesystem_unconfined_type)
                                                                                (typeattributeset cil_gen_require selinux_unconfined_type)
                                                                                (typeattributeset cil_gen_require corenet_unconfined_type)
                                                                                (typeattributeset corenet_unconfined_type (unconfined_cronjob_t ))
                                                                                (typeattributeset cil_gen_require process_uncond_exempt)
                                                                                (typeattributeset process_uncond_exempt (unconfined_cronjob_t ))
                                                                                (typeattributeset cil_gen_require unconfined_domain_type)
                                                                                (typeattributeset unconfined_domain_type (unconfined_cronjob_t ))
                                                                                (typeattributeset cil_gen_require can_load_kernmodule)
                                                                                (typeattributeset can_load_kernmodule (unconfined_cronjob_t ))
                                                                                (typeattributeset cil_gen_require filesystem_unconfined_type)
                                                                                (typeattributeset filesystem_unconfined_type (unconfined_cronjob_t ))
                                                                                (typeattributeset cil_gen_require set_curr_context)
                                                                                (typeattributeset set_curr_context (unconfined_cronjob_t ))
                                                                                (typeattributeset cil_gen_require devices_unconfined_type)
                                                                                (typeattributeset devices_unconfined_type (unconfined_cronjob_t ))
                                                                                (typeattributeset cil_gen_require files_unconfined_type)
                                                                                (typeattributeset files_unconfined_type (unconfined_cronjob_t ))
                                                                                (typeattributeset cil_gen_require kern_unconfined)
                                                                                (typeattributeset kern_unconfined (unconfined_cronjob_t ))
                                                                                (typeattributeset cil_gen_require can_change_object_identity)
                                                                                (typeattributeset can_change_object_identity (unconfined_cronjob_t ))
                                                                                (typeattributeset cil_gen_require selinux_unconfined_type)
                                                                                (typeattributeset selinux_unconfined_type (unconfined_cronjob_t ))
                                                                                (allow unconfined_cronjob_t self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
                                                                                (allow unconfined_cronjob_t self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
                                                                                (allow unconfined_cronjob_t self (capability2 (syslog wake_alarm perfmon bpf)))
                                                                                (allow unconfined_cronjob_t self (cap2_userns (syslog wake_alarm perfmon bpf)))
                                                                                (allow unconfined_cronjob_t self (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                                                (allow unconfined_cronjob_t self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write setfcap)))
                                                                                (allow unconfined_cronjob_t self (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf)))
                                                                                (allow unconfined_cronjob_t self (process (transition)))
                                                                                (allow unconfined_cronjob_t self (file (ioctl read write getattr lock append open)))
                                                                                (allow unconfined_cronjob_t self (anon_inode (read write create map)))
                                                                                (allow unconfined_cronjob_t self (nscd (getpwd getgrp gethost getstat admin shmempwd shmemgrp shmemhost getserv shmemserv)))
                                                                                (allow unconfined_cronjob_t self (dbus (send_msg acquire_svc)))
                                                                                (allow unconfined_cronjob_t self (passwd (rootok passwd chfn chsh crontab)))
                                                                                (allow unconfined_cronjob_t self (association (sendto recvfrom setcontext polmatch)))
                                                                                (dontaudit unconfined_cronjob_t domain (dir (ioctl read getattr lock open search)))
                                                                                (dontaudit unconfined_cronjob_t domain (lnk_file (read getattr)))
                                                                                (dontaudit unconfined_cronjob_t domain (file (ioctl read getattr lock open)))
                                                                                (dontaudit unconfined_cronjob_t domain (sock_file (read getattr open)))
                                                                                (dontaudit unconfined_cronjob_t domain (fifo_file (ioctl read getattr lock open)))
                                                                                (dontaudit unconfined_cronjob_t domain (process (ptrace)))
                                                                                (allow unconfined_cronjob_t etc_t (service (status)))
                                                                                (allow unconfined_cronjob_t etc_t (service (start)))
                                                                                (allow unconfined_cronjob_t etc_t (service (stop)))
                                                                                (booleanif (allow_execstack)
                                                                                    (true
                                                                                        (allow unconfined_cronjob_t self (process (execmem execstack)))
                                                                                    )
                                                                                )
                                                                                (booleanif (allow_execmem)
                                                                                    (true
                                                                                        (allow unconfined_cronjob_t self (process (execmem)))
                                                                                    )
                                                                                )
                                                                                (booleanif (allow_execheap)
                                                                                    (true
                                                                                        (allow unconfined_cronjob_t self (process (execheap)))
                                                                                        (auditallow unconfined_cronjob_t self (process (execheap)))
                                                                                    )
                                                                                )
                                                                                (optional cron_optional_78
                                                                                    (typeattributeset cil_gen_require can_read_shadow_passwords)
                                                                                    (typeattributeset can_read_shadow_passwords (crond_t ))
                                                                                    (typeattributeset cil_gen_require can_write_shadow_passwords)
                                                                                    (typeattributeset cil_gen_require can_relabelto_shadow_passwords)
                                                                                    (typeattributeset cil_gen_require can_write_shadow_passwords)
                                                                                    (typeattributeset can_write_shadow_passwords (unconfined_cronjob_t ))
                                                                                    (typeattributeset cil_gen_require can_read_shadow_passwords)
                                                                                    (typeattributeset can_read_shadow_passwords (unconfined_cronjob_t ))
                                                                                    (typeattributeset cil_gen_require can_relabelto_shadow_passwords)
                                                                                    (typeattributeset can_relabelto_shadow_passwords (unconfined_cronjob_t ))
                                                                                )
                                                                                (optional cron_optional_79
                                                                                    (typeattributeset cil_gen_require dbusd_unconfined)
                                                                                    (typeattributeset cil_gen_require dbusd_unconfined)
                                                                                    (typeattributeset dbusd_unconfined (unconfined_cronjob_t ))
                                                                                )
                                                                                (optional cron_optional_80
                                                                                    (typeattributeset cil_gen_require ipsec_spd_t)
                                                                                    (allow unconfined_cronjob_t ipsec_spd_t (association (setcontext)))
                                                                                    (allow unconfined_cronjob_t ipsec_spd_t (association (polmatch)))
                                                                                    (allow unconfined_cronjob_t self (association (sendto)))
                                                                                )
                                                                                (optional cron_optional_81
                                                                                    (typeattributeset cil_gen_require nscd_t)
                                                                                    (allow unconfined_cronjob_t nscd_t (nscd (getpwd getgrp gethost getstat admin shmempwd shmemgrp shmemhost getserv shmemserv)))
                                                                                )
                                                                                (optional cron_optional_82
                                                                                    (typeattributeset cil_gen_require sepgsql_unconfined_type)
                                                                                    (typeattributeset cil_gen_require sepgsql_unconfined_type)
                                                                                    (typeattributeset sepgsql_unconfined_type (unconfined_cronjob_t ))
                                                                                )
                                                                                (optional cron_optional_83
                                                                                    (typeattributeset cil_gen_require selinux_config_t)
                                                                                    (typeattributeset cil_gen_require etc_t)
                                                                                    (typeattributeset cil_gen_require policy_config_t)
                                                                                    (typeattributeset cil_gen_require can_relabelto_binary_policy)
                                                                                    (typeattributeset cil_gen_require can_relabelto_binary_policy)
                                                                                    (typeattributeset can_relabelto_binary_policy (unconfined_cronjob_t ))
                                                                                    (allow unconfined_cronjob_t etc_t (dir (getattr open search)))
                                                                                    (allow unconfined_cronjob_t selinux_config_t (dir (getattr open search)))
                                                                                    (allow unconfined_cronjob_t policy_config_t (dir (ioctl write getattr lock open add_name search)))
                                                                                    (allow unconfined_cronjob_t policy_config_t (file (create getattr open)))
                                                                                    (allow unconfined_cronjob_t policy_config_t (dir (getattr open search)))
                                                                                    (allow unconfined_cronjob_t policy_config_t (file (ioctl write getattr lock append open)))
                                                                                    (allow unconfined_cronjob_t policy_config_t (file (relabelto)))
                                                                                )
                                                                                (optional cron_optional_84
                                                                                    (typeattributeset cil_gen_require storage_unconfined_type)
                                                                                    (typeattributeset cil_gen_require storage_unconfined_type)
                                                                                    (typeattributeset storage_unconfined_type (unconfined_cronjob_t ))
                                                                                )
                                                                                (optional cron_optional_85
                                                                                    (typeattributeset cil_gen_require x_domain)
                                                                                    (typeattributeset cil_gen_require xserver_unconfined_type)
                                                                                    (typeattributeset cil_gen_require x_domain)
                                                                                    (typeattributeset x_domain (unconfined_cronjob_t ))
                                                                                    (typeattributeset cil_gen_require xserver_unconfined_type)
                                                                                    (typeattributeset xserver_unconfined_type (unconfined_cronjob_t ))
                                                                                )
                                                                            )
                                                                        )
                                                                    )
                                                                )
                                                            )
                                                        )
                                                    )
                                                )
                                            )
                                        )
                                    )
                                )
                            )
                        )
                    )
                )
            )
        )
    )
)
(filecon "/etc/rc\.d/init\.d/anacron" file (system_u object_r crond_initrc_exec_t ((s0) (s0))))
(filecon "/etc/cron\.d(/.*)?" any (system_u object_r system_cron_spool_t ((s0) (s0))))
(filecon "/etc/crontab" file (system_u object_r system_cron_spool_t ((s0) (s0))))
(filecon "/usr/bin/anacron" file (system_u object_r anacron_exec_t ((s0) (s0))))
(filecon "/usr/bin/cron(d)?" file (system_u object_r crond_exec_t ((s0) (s0))))
(filecon "/usr/bin/fcron" file (system_u object_r crond_exec_t ((s0) (s0))))
(filecon "/usr/bin/fcronsighup" file (system_u object_r crontab_exec_t ((s0) (s0))))
(filecon "/usr/bin/(f)?crontab" file (system_u object_r crontab_exec_t ((s0) (s0))))
(filecon "/usr/lib/systemd/system/atd.*\.service" file (system_u object_r crond_unit_t ((s0) (s0))))
(filecon "/usr/lib/systemd/system/crond.*\.service" file (system_u object_r crond_unit_t ((s0) (s0))))
(filecon "/usr/libexec/fcron" file (system_u object_r crond_exec_t ((s0) (s0))))
(filecon "/usr/libexec/fcronsighup" file (system_u object_r crontab_exec_t ((s0) (s0))))
(filecon "/usr/sbin/anacron" file (system_u object_r anacron_exec_t ((s0) (s0))))
(filecon "/usr/sbin/cron(d)?" file (system_u object_r crond_exec_t ((s0) (s0))))
(filecon "/usr/sbin/fcron" file (system_u object_r crond_exec_t ((s0) (s0))))
(filecon "/usr/sbin/fcronsighup" file (system_u object_r crontab_exec_t ((s0) (s0))))
(filecon "/var/lib/glpi/files(/.*)?" any (system_u object_r cron_var_lib_t ((s0) (s0))))
(filecon "/var/log/cron.*" any (system_u object_r cron_log_t ((s0) (s0))))
(filecon "/var/log/popularity-contest.*" any (system_u object_r cron_log_t ((s0) (s0))))
(filecon "/var/log/rpmpkgs.*" file (system_u object_r cron_log_t ((s0) (s0))))
(filecon "/run/anacron\.pid" file (system_u object_r crond_runtime_t ((s0) (s0))))
(filecon "/run/cron(d)?\.pid" file (system_u object_r crond_runtime_t ((s0) (s0))))
(filecon "/run/cron(d)?\.reboot" file (system_u object_r crond_runtime_t ((s0) (s0))))
(filecon "/run/fcron\.fifo" socket (system_u object_r crond_runtime_t ((s0) (s0))))
(filecon "/run/fcron\.pid" file (system_u object_r crond_runtime_t ((s0) (s0))))
(filecon "/var/spool/anacron(/.*)?" any (system_u object_r system_cron_spool_t ((s0) (s0))))
(filecon "/var/spool/cron" dir (system_u object_r cron_spool_t ((s0) (s0))))
(filecon "/var/spool/cron/[^/]*" file ())
(filecon "/var/spool/cron/crontabs" dir (system_u object_r cron_spool_t ((s0) (s0))))
(filecon "/var/spool/cron/crontabs/.*" file ())
(filecon "/var/spool/fcron" dir (system_u object_r cron_spool_t ((s0) (s0))))
(filecon "/var/spool/fcron/.*" any ())
(filecon "/var/spool/fcron/systab\.orig" file (system_u object_r system_cron_spool_t ((s0) (s0))))
(filecon "/var/spool/fcron/systab" file (system_u object_r system_cron_spool_t ((s0) (s0))))
(filecon "/var/spool/fcron/systab\.tmp" file (system_u object_r system_cron_spool_t ((s0) (s0))))
(filecon "/var/spool/fcron/new\.systab" file (system_u object_r system_cron_spool_t ((s0) (s0))))
(filecon "/var/spool/fcron/rm\.systab" file (system_u object_r system_cron_spool_t ((s0) (s0))))
(filecon "/var/spool/cron/lastrun" dir (system_u object_r crond_tmp_t ((s0) (s0))))
(filecon "/var/spool/cron/lastrun/[^/]*" file ())
(filecon "/var/spool/cron/crontabs/munin" file (system_u object_r system_cron_spool_t ((s0) (s0))))
