Hi!
I'm using selinux-policy-strict-2.4.6-30.el5.
I've added a job to apache's crontab (crontab -e -u apache).
Now I can see those errors in /var/log/cron:
crond[27249]: (apache) Unauthorized SELinux context, but SELinux in permissive mode, continuing (cron/apache) crond[29358]: (apache) NULL security context for user, but SELinux in permissive mode, continuing ()
Google search found a suggestion that FC6 cron policy is broken, resulting in similar symptoms (but for root instead of apache user), but what about RHEL5?
I've also added a simple apache cronjob that simply writes output from "id -Z" to a file in /tmp and it has written the following context data:
root:system_r:crond_t:SystemLow-SystemHigh
Why is the user root? Shouldn't it be user_u or system_u or something like that?