From: sven.vermeulen@siphos.be (Sven Vermeulen)
Date: Mon, 17 Sep 2012 17:30:11 +0200
Subject: [refpolicy] [PATCH] Add Debian location for rtkit-daemon daemon
In-Reply-To: <505740DC.6090400@redhat.com>
References: <1347488050-19736-1-git-send-email-bigon@debian.org>
	<1347538790.2915.20.camel@d30.localdomain>
	<50520213.40902@redhat.com>
	<1347552374.2915.27.camel@d30.localdomain>
	<50573EFD.9020603@tresys.com> <505740DC.6090400@redhat.com>
Message-ID: <CAPzO=Nz4KSeYqT9XXR0q5xYoWceOOWuoQDcC6MQ1Hf9m==5Dyg@mail.gmail.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Sep 17, 2012 5:25 PM, "Daniel J Walsh" <dwalsh@redhat.com> wrote:
> Systemd is pushing the idea that you put apps that are to be run as a
service
> or by a library into /usr/lib/PACKAGENAME (This apps should never be run
using
> multilib).  As opposed to /usr/libexec.

Wouldn't it be a good idea to use a different label for these? They aren't
meant to be executed by individuals xirectly are they? So bin_t might not
be as good. What about a service_exec_t or so?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://oss.tresys.com/pipermail/refpolicy/attachments/20120917/a8cdf2d6/attachment-0001.html