selinux process transtion and file soft links

[jiun bookworm <thebookworm101@xxxxxxxxx>]

i have a python virtual env with these files:

lrwxrwxrwx. app_u app_g system_u:object_r:appi_exec_t:s0 python -> python3
-rwxr-xr-x. app_u  app_g system_u:object_r:appi_exec_t:s0 python3

the first is a link to the second,  the first is labelled with

app_exec_t, and this is allowed a transition to app_t.

but  it does not work, i have to have the label  on the

second file even if the systemd init file points to  the first.

is it that selinux does not consider executing through
the softlink to be a valid execution for process transition?

please explain the observation.

--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux