2014-02-08 13:28:23

by Laurent Bigonville

Subject: [refpolicy] [PATCH] Properly label git-daemon and gitweb.cgi on Debian

From: Laurent Bigonville <[email protected]>

---
git.fc | 4 ++++
1 file changed, 4 insertions(+)

diff --git a/git.fc b/git.fc
index 24700f8..96bba87 100644
--- a/git.fc
+++ b/git.fc
@@ -1,7 +1,11 @@
HOME_DIR/public_git(/.*)? gen_context(system_u:object_r:git_user_content_t,s0)

+/usr/lib/git-core/git-daemon -- gen_context(system_u:object_r:gitd_exec_t,s0)
+
/usr/libexec/git-core/git-daemon -- gen_context(system_u:object_r:gitd_exec_t,s0)

+/usr/share/gitweb/gitweb\.cgi -- gen_context(system_u:object_r:httpd_git_script_exec_t,s0)
+
/var/cache/cgit(/.*)? gen_context(system_u:object_r:httpd_git_rw_content_t,s0)
/var/cache/gitweb-caching(/.*)? gen_context(system_u:object_r:httpd_git_rw_content_t,s0)

--
1.9.0.rc3

2014-02-08 13:53:28

by cpebenito

Subject: [refpolicy] [PATCH] Properly label git-daemon and gitweb.cgi on Debian

On 2/8/2014 8:28 AM, Laurent Bigonville wrote:
> From: Laurent Bigonville <[email protected]>
>
> ---
> git.fc | 4 ++++
> 1 file changed, 4 insertions(+)
>
> diff --git a/git.fc b/git.fc
> index 24700f8..96bba87 100644
> --- a/git.fc
> +++ b/git.fc
> @@ -1,7 +1,11 @@
> HOME_DIR/public_git(/.*)? gen_context(system_u:object_r:git_user_content_t,s0)
>
> +/usr/lib/git-core/git-daemon -- gen_context(system_u:object_r:gitd_exec_t,s0)
> +
> /usr/libexec/git-core/git-daemon -- gen_context(system_u:object_r:gitd_exec_t,s0)
>
> +/usr/share/gitweb/gitweb\.cgi -- gen_context(system_u:object_r:httpd_git_script_exec_t,s0)
> +
> /var/cache/cgit(/.*)? gen_context(system_u:object_r:httpd_git_rw_content_t,s0)
> /var/cache/gitweb-caching(/.*)? gen_context(system_u:object_r:httpd_git_rw_content_t,s0)

Merged.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com