On 11/11/24 12:33 PM, Dominick Grift wrote:
Ian Pilcher <arequipeno@xxxxxxxxx> writes:
Is there some way that I can make the wrapper take advantage of these
rules, possibly by transitioning back to init_t?
You can label the runcp command with a private executable file type and
then allow systemd to execute it without a transition effectively
running runcp in init_t just like systemd. Then when runcp executes
stunnel it should transparently transition from init_t to stunnel_t as
if runcp was not there.
I like it!
Thanks!
--
========================================================================
If your user interface is intuitive in retrospect ... it isn't intuitive
========================================================================
