The SMC Scheduled Jobs tool always runs at ADMIN_LOW
even if the SMC client is running at a normal user label, like CONFIDENTIAL
. The SMC server runs at ADMIN_LOW
and does
not consider the client's sensitivity label.
No error message is generated but the cron entry is stored at a label below the user's minimum label.
Workaround: To create cron jobs at labels other than ADMIN_LOW
, use the crontab(1) command.