/tmp/lost+found on F9

[Paul Howarth <paul city-fan org>]

Being an old-fashioned sort of guy, I always create a separate
partition (well, logical volume these days) for /tmp and various other
top-level directories. Hence I have a directory /tmp/lost+found and
every day I get an email from cron like this:

  Subject: Cron <root goalkeeper> run-parts /etc/cron.daily
  Date: Tue, 27 May 2008 04:17:12 +0100

  /etc/cron.daily/tmpwatch:

  error: failed to lstat /tmp/lost+found: Permission denied

The following policy fixes this:

  policy_module(localmisc, 0.0.1)

  require {
	type tmpreaper_t;
  }

  # Allow tmpwatch to stat /tmp/lost+found
  files_getattr_lost_found_dirs(tmpreaper_t)

Paul.