/usr/lib/NetworkManager/nm-dispatcher
Russell Coker <[email protected]> Tue, 26 Sep 2023 18:09:55 +1000
| Newsgroups | org.kernel.vger.selinux-refpolicy |
|---|---|
| Message-ID | <2772620.BEx9A2HvPv@cupcakke> |
Regarding /usr/lib/NetworkManager/nm-dispatcher, you asked for more information when I submitted a patch changing the context. Currently it has type NetworkManager_initrc_exec_t which implies that it's part of a start script when it's really a program that's doing the actual work. Also that type means that when a laptop resumes from suspend it gets run in domain initrc_t which is not appropriate for it. We could have a domain_auto_trans for type NetworkManager_initrc_exec_t but I think it's more appropriate to give it a label that more accurately reflects it's use. What do you think Chris? -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/