Received-SPF: pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Message-ID: <03c61997-4190-ed7d-d791-867858d1cb23@linux.microsoft.com>
Date:   Wed, 16 Feb 2022 10:30:12 -0500
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101
 Thunderbird/91.6.0
Subject: Re: [PATCH] puppet patch V2
Content-Language: en-US
To:     russell@coker.com.au, selinux-refpolicy@vger.kernel.org,
        Chris PeBenito <pebenito@ieee.org>
References: <YgsIj5n4TxELgB3u@xev.coker.com.au>
 <53ce3b34-2c22-c485-cca4-2cff2ffc942b@ieee.org> <3072740.2nxLzSqVoC@xev>
From:   Chris PeBenito <chpebeni@linux.microsoft.com>
In-Reply-To: <3072740.2nxLzSqVoC@xev>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk

On 2/16/2022 08:08, Russell Coker wrote:
> On Wednesday, 16 February 2022 22:35:58 AEDT Chris PeBenito wrote:
>> Why are you adding bin_t as an entrypoint here and below?
> 
> That's for running a script via the interpreter instead of via a #!/usr/bin/
> whatever so you can't just label the script file.

I'm not sure I follow.  Are you saying this is for handling things like 
  "bash -c /some/script" and "python foo.py"?

-- 
Chris PeBenito