[selinux] Re: Idiomatic solution for tiny systemd "services"?

[Robin Lee Powell]

On Tue, Mar 03, 2015 at 02:23:01PM +0100, Miroslav Grepl wrote:
> I apologize, I overlooked your mail.

No problem.

> So still the question is what a proper domain is for it. We could
> call
> 
> /usr/bin/node /srv/parsoid/api/server.js
> 
> from a helper script which could have a label -> httpd_exec_t?
> 
> ExecStart=/usr/bin/test_helper_script

Oh!  Yes, that works very well!  Thank you!

I had to turn on httpd_execmem, but enh.

-- 
http://intelligence.org/ :  Our last, best hope for a fantastic future.
.i ko na cpedu lo nu stidi vau loi jbopre .i dafsku lu na go'i li'u .e
lu go'i li'u .i ji'a go'i lu na'e go'i li'u .e lu go'i na'i li'u .e
lu no'e go'i li'u .e lu to'e go'i li'u .e lu lo mamta be do cu sofybakni li'u