2014-04-05 17:10:53

by Nicolas Iooss

Subject: [refpolicy] [PATCH] Label /usr/share/gitweb/static as httpd_git_content_t

This directory contains gitweb static files at least on Debian and ArchLinux.
---
git.fc | 1 +
1 file changed, 1 insertion(+)

diff --git a/git.fc b/git.fc
index d8a3f8e..c26586d 100644
--- a/git.fc
+++ b/git.fc
@@ -5,6 +5,7 @@ HOME_DIR/public_git(/.*)? gen_context(system_u:object_r:git_user_content_t,s0)
/usr/libexec/git-core/git-daemon -- gen_context(system_u:object_r:gitd_exec_t,s0)

/usr/share/gitweb/gitweb\.cgi -- gen_context(system_u:object_r:httpd_git_script_exec_t,s0)
+/usr/share/gitweb/static(/.*)? gen_context(system_u:object_r:httpd_git_content_t,s0)

/var/cache/cgit(/.*)? gen_context(system_u:object_r:httpd_git_rw_content_t,s0)
/var/cache/gitweb-caching(/.*)? gen_context(system_u:object_r:httpd_git_rw_content_t,s0)
--
1.9.1

2014-04-11 13:16:53

by cpebenito

Subject: [refpolicy] [PATCH] Label /usr/share/gitweb/static as httpd_git_content_t

On 04/05/2014 01:10 PM, Nicolas Iooss wrote:
> This directory contains gitweb static files at least on Debian and ArchLinux.
> ---
> git.fc | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/git.fc b/git.fc
> index d8a3f8e..c26586d 100644
> --- a/git.fc
> +++ b/git.fc
> @@ -5,6 +5,7 @@ HOME_DIR/public_git(/.*)? gen_context(system_u:object_r:git_user_content_t,s0)
> /usr/libexec/git-core/git-daemon -- gen_context(system_u:object_r:gitd_exec_t,s0)
>
> /usr/share/gitweb/gitweb\.cgi -- gen_context(system_u:object_r:httpd_git_script_exec_t,s0)
> +/usr/share/gitweb/static(/.*)? gen_context(system_u:object_r:httpd_git_content_t,s0)
>
> /var/cache/cgit(/.*)? gen_context(system_u:object_r:httpd_git_rw_content_t,s0)
> /var/cache/gitweb-caching(/.*)? gen_context(system_u:object_r:httpd_git_rw_content_t,s0)

Merged.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com