From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Sat, 8 Feb 2014 08:53:28 -0500 Subject: [refpolicy] [PATCH] Properly label git-daemon and gitweb.cgi on Debian In-Reply-To: <1391866103-27041-1-git-send-email-bigon@debian.org> References: <1391866103-27041-1-git-send-email-bigon@debian.org> Message-ID: <52F636D8.9000207@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 2/8/2014 8:28 AM, Laurent Bigonville wrote: > From: Laurent Bigonville > > --- > git.fc | 4 ++++ > 1 file changed, 4 insertions(+) > > diff --git a/git.fc b/git.fc > index 24700f8..96bba87 100644 > --- a/git.fc > +++ b/git.fc > @@ -1,7 +1,11 @@ > HOME_DIR/public_git(/.*)? gen_context(system_u:object_r:git_user_content_t,s0) > > +/usr/lib/git-core/git-daemon -- gen_context(system_u:object_r:gitd_exec_t,s0) > + > /usr/libexec/git-core/git-daemon -- gen_context(system_u:object_r:gitd_exec_t,s0) > > +/usr/share/gitweb/gitweb\.cgi -- gen_context(system_u:object_r:httpd_git_script_exec_t,s0) > + > /var/cache/cgit(/.*)? gen_context(system_u:object_r:httpd_git_rw_content_t,s0) > /var/cache/gitweb-caching(/.*)? gen_context(system_u:object_r:httpd_git_rw_content_t,s0) Merged. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com