From ab65771358f581d55889eba5e3feab283ab55717 Mon Sep 17 00:00:00 2001
From: Michal Schmidt <mschmidt@redhat.com>
Date: Thu, 29 Aug 2013 18:12:02 +0200
Subject: [PATCH 6/8] daemon/main: do not create /run/icecc by ourselves

In order to be able to restrict the daemon's SELinux policy even more,
let's rely on tmpfiles.d to create the /run/icecc directory for us
instead of creating it from the daemon.
---
 daemon/main.cpp | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/daemon/main.cpp b/daemon/main.cpp
index e08b1e1..387d4e2 100644
--- a/daemon/main.cpp
+++ b/daemon/main.cpp
@@ -1801,10 +1801,6 @@ int main( int argc, char ** argv )
             logfile = "/var/log/icecc/iceccd.log";
         }
 
-        mkdir("/var/run/icecc", S_IRWXU|S_IRGRP|S_IXGRP|S_IROTH|S_IXOTH);
-        chmod("/var/run/icecc", S_IRWXU|S_IRGRP|S_IXGRP|S_IROTH|S_IXOTH);
-        chown("/var/run/icecc", d.user_uid, d.user_gid);
-
 #ifdef HAVE_LIBCAP_NG
         capng_clear(CAPNG_SELECT_BOTH);
         capng_update(CAPNG_ADD, (capng_type_t)(CAPNG_EFFECTIVE|CAPNG_PERMITTED), CAP_SYS_CHROOT);
-- 
1.8.3.1