Re: [PATCH] puppet patch V2
Chris PeBenito <[email protected]> Thu, 17 Feb 2022 08:49:53 -0500
| Newsgroups | org.kernel.vger.selinux-refpolicy |
|---|---|
| Message-ID | <[email protected]> |
On 2/16/22 20:41, Russell Coker wrote: > On Thursday, 17 February 2022 02:30:12 AEDT Chris PeBenito wrote: >> On 2/16/2022 08:08, Russell Coker wrote: >>> On Wednesday, 16 February 2022 22:35:58 AEDT Chris PeBenito wrote: >>>> Why are you adding bin_t as an entrypoint here and below? >>> >>> That's for running a script via the interpreter instead of via a >>> #!/usr/bin/ whatever so you can't just label the script file. >> >> I'm not sure I follow. Are you saying this is for handling things like >> "bash -c /some/script" and "python foo.py"? > > Yes. I don't think we make this type of accomodation elsewhere in the policy, so I'm inclined to say no to this part of the change. -- Chris PeBenito