Re: [PATCH] puppet patch V2

Chris PeBenito <[email protected]> Thu, 17 Feb 2022 08:49:53 -0500
Newsgroups org.kernel.vger.selinux-refpolicy
Message-ID <[email protected]>
On 2/16/22 20:41, Russell Coker wrote:
> On Thursday, 17 February 2022 02:30:12 AEDT Chris PeBenito wrote:
>> On 2/16/2022 08:08, Russell Coker wrote:
>>> On Wednesday, 16 February 2022 22:35:58 AEDT Chris PeBenito wrote:
>>>> Why are you adding bin_t as an entrypoint here and below?
>>>
>>> That's for running a script via the interpreter instead of via a
>>> #!/usr/bin/ whatever so you can't just label the script file.
>>
>> I'm not sure I follow.  Are you saying this is for handling things like
>>    "bash -c /some/script" and "python foo.py"?
> 
> Yes.

I don't think we make this type of accomodation elsewhere in the policy, so I'm 
inclined to say no to this part of the change.

-- 
Chris PeBenito