[CentOS] EL8: SElinux / dac_override / tmpwatch

Fri Aug 28 23:56:54 UTC 2020
Jonathan Billings <billings at negate.org>

On Aug 28, 2020, at 17:53, Leon Fauster via CentOS <centos at centos.org> wrote:
> 
> Is cron running in EL8 with stripped CAPs of? Does some one have an
> idea to address this?

In general, we no longer use tmpwatch at all.  In CentOS 7 and 8, use systemd-tmpfiles. Here is a blog post that describes it pretty well:

https://developers.redhat.com/blog/2016/09/20/managing-temporary-files-with-systemd-tmpfiles-on-rhel7/

--
Jonathan Billings <billings at negate.org>