2014-03-15 17:36:32

by Nicolas Iooss

Subject: [refpolicy] [PATCH] Label /usr/share/gitweb/static as httpd_sys_content_t

This directory contains gitweb static files at least on Debian and ArchLinux.
---
apache.fc | 1 +
1 file changed, 1 insertion(+)

diff --git a/apache.fc b/apache.fc
index 4e90b04..6d0274c 100644
--- a/apache.fc
+++ b/apache.fc
@@ -66,6 +66,7 @@ ifdef(`distro_suse',`
/usr/share/dirsrv(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0)
/usr/share/doc/ghc/html(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0)
/usr/share/drupal.* gen_context(system_u:object_r:httpd_sys_content_t,s0)
+/usr/share/gitweb/static(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0)
/usr/share/glpi(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0)
/usr/share/htdig(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0)
/usr/share/icecast(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0)
--
1.9.0

2014-04-04 19:17:07

by cpebenito

Subject: [refpolicy] [PATCH] Label /usr/share/gitweb/static as httpd_sys_content_t

On 03/15/2014 01:36 PM, Nicolas Iooss wrote:
> This directory contains gitweb static files at least on Debian and ArchLinux.
> ---
> apache.fc | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/apache.fc b/apache.fc
> index 4e90b04..6d0274c 100644
> --- a/apache.fc
> +++ b/apache.fc
> @@ -66,6 +66,7 @@ ifdef(`distro_suse',`
> /usr/share/dirsrv(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0)
> /usr/share/doc/ghc/html(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0)
> /usr/share/drupal.* gen_context(system_u:object_r:httpd_sys_content_t,s0)
> +/usr/share/gitweb/static(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0)
> /usr/share/glpi(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0)
> /usr/share/htdig(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0)
> /usr/share/icecast(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0)

I believe we want to add fc entries in the git module instead.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com