After setting a limit in /etc/security/limits.conf for nofile 10240 for a user, while SELinux is in enforcing mode, crond gives this error: Aug 3 14:12:01 vps cron[23229]: pam_limits(cron:session): Could not set limit for 'nofile': Operation not permitted Aug 3 14:12:01 vps cron[23229]: Permission denied If I setenforce 0 this error goes away. I filed a bug because there is no audit denial along with the error that could be fixed by an intermediate user with audit2allow or such. Therefor it is difficult to fix without some background knowledge of the crond and the SELinux policy and state. I figured someone might know those areas well and see this before I got myself too entangled in it.
Hi. I was able to fix this issue by using `semodule -DB' which made all denials be shown.
Yes, sometimes it'll happen that a denial is hidden due to dontaudit rules. If you could report the permissions you had to add to fix this, we'll add them to our policy.
