{"comment":{"url":"https://api.github.com/repos/pebenito/refpolicy/comments/13922256","html_url":"https://github.com/pebenito/refpolicy/commit/2dc5068e554d0d58abf26578c9238605a41a7746#commitcomment-13922256","id":13922256,"user":{"login":"doverride","id":6236265,"avatar_url":"https://avatars.githubusercontent.com/u/6236265?v=3","gravatar_id":"","url":"https://api.github.com/users/doverride","html_url":"https://github.com/doverride","followers_url":"https://api.github.com/users/doverride/followers","following_url":"https://api.github.com/users/doverride/following{/other_user}","gists_url":"https://api.github.com/users/doverride/gists{/gist_id}","starred_url":"https://api.github.com/users/doverride/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/doverride/subscriptions","organizations_url":"https://api.github.com/users/doverride/orgs","repos_url":"https://api.github.com/users/doverride/repos","events_url":"https://api.github.com/users/doverride/events{/privacy}","received_events_url":"https://api.github.com/users/doverride/received_events","type":"User","site_admin":false},"position":4,"line":238,"path":"policy/modules/kernel/corecommands.fc","commit_id":"2dc5068e554d0d58abf26578c9238605a41a7746","created_at":"2015-10-22T10:03:58Z","updated_at":"2015-10-22T10:03:58Z","body":"What i think, you should consider here is that systemd will run everything generic with a domain transition to initrc_t (if i am not mistaken). So i would ask myself the question: do i want systemd to run any of these in the initrc_t domain?\r\n\r\nI am not sure, but i think that in my policy i have chosen another route. I create a sd_helper type for stuff that i want systemd to run in the systemd domain and not in the initrc_t domain"}}