Received-SPF: pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Russell Coker <russell@coker.com.au>
To:     selinux-refpolicy@vger.kernel.org,
        Chris PeBenito <pebenito@ieee.org>,
        Chris PeBenito <chpebeni@linux.microsoft.com>
Subject: Re: [PATCH] puppet patch V2
Date:   Thu, 17 Feb 2022 12:41:03 +1100
Message-ID: <3266491.hCnaqv1u2z@liv>
In-Reply-To: <03c61997-4190-ed7d-d791-867858d1cb23@linux.microsoft.com>
References: <YgsIj5n4TxELgB3u@xev.coker.com.au> <3072740.2nxLzSqVoC@xev> <03c61997-4190-ed7d-d791-867858d1cb23@linux.microsoft.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset="us-ascii"
Precedence: bulk

On Thursday, 17 February 2022 02:30:12 AEDT Chris PeBenito wrote:
> On 2/16/2022 08:08, Russell Coker wrote:
> > On Wednesday, 16 February 2022 22:35:58 AEDT Chris PeBenito wrote:
> >> Why are you adding bin_t as an entrypoint here and below?
> > 
> > That's for running a script via the interpreter instead of via a
> > #!/usr/bin/ whatever so you can't just label the script file.
> 
> I'm not sure I follow.  Are you saying this is for handling things like
>   "bash -c /some/script" and "python foo.py"?

Yes.

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/