/usr/lib/NetworkManager/nm-dispatcher

Russell Coker <[email protected]> Tue, 26 Sep 2023 18:09:55 +1000
Newsgroups org.kernel.vger.selinux-refpolicy
Message-ID <2772620.BEx9A2HvPv@cupcakke>
Regarding /usr/lib/NetworkManager/nm-dispatcher, you asked for more 
information when I submitted a patch changing the context.

Currently it has type NetworkManager_initrc_exec_t which implies that it's 
part of a start script when it's really a program that's doing the actual 
work.  Also that type means that when a laptop resumes from suspend it gets 
run in domain initrc_t which is not appropriate for it.

We could have a domain_auto_trans for type NetworkManager_initrc_exec_t but I 
think it's more appropriate to give it a label that more accurately reflects 
it's use.

What do you think Chris?

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/