Received-SPF: pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 2620:137:e000::3:5 as permitted sender) client-ip=2620:137:e000::3:5;
From:   Russell Coker <russell@coker.com.au>
To:     selinux-refpolicy@vger.kernel.org,
        Chris PeBenito <chpebeni@linux.microsoft.com>
Subject: /usr/lib/NetworkManager/nm-dispatcher
Date:   Tue, 26 Sep 2023 18:09:55 +1000
Message-ID: <2772620.BEx9A2HvPv@cupcakke>
MIME-Version: 1.0
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset="us-ascii"
Precedence: bulk

Regarding /usr/lib/NetworkManager/nm-dispatcher, you asked for more 
information when I submitted a patch changing the context.

Currently it has type NetworkManager_initrc_exec_t which implies that it's 
part of a start script when it's really a program that's doing the actual 
work.  Also that type means that when a laptop resumes from suspend it gets 
run in domain initrc_t which is not appropriate for it.

We could have a domain_auto_trans for type NetworkManager_initrc_exec_t but I 
think it's more appropriate to give it a label that more accurately reflects 
it's use.

What do you think Chris?

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/