From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Fri, 4 Apr 2014 15:17:07 -0400
Subject: [refpolicy] [PATCH] Label /usr/share/gitweb/static as
	httpd_sys_content_t
In-Reply-To: <1394904992-9855-1-git-send-email-nicolas.iooss@m4x.org>
References: <1394904992-9855-1-git-send-email-nicolas.iooss@m4x.org>
Message-ID: <533F0533.1030900@tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 03/15/2014 01:36 PM, Nicolas Iooss wrote:
> This directory contains gitweb static files at least on Debian and ArchLinux.
> ---
>  apache.fc | 1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/apache.fc b/apache.fc
> index 4e90b04..6d0274c 100644
> --- a/apache.fc
> +++ b/apache.fc
> @@ -66,6 +66,7 @@ ifdef(`distro_suse',`
>  /usr/share/dirsrv(/.*)?	gen_context(system_u:object_r:httpd_sys_content_t,s0)
>  /usr/share/doc/ghc/html(/.*)?	gen_context(system_u:object_r:httpd_sys_content_t,s0)
>  /usr/share/drupal.*	gen_context(system_u:object_r:httpd_sys_content_t,s0)
> +/usr/share/gitweb/static(/.*)?	gen_context(system_u:object_r:httpd_sys_content_t,s0)
>  /usr/share/glpi(/.*)?	gen_context(system_u:object_r:httpd_sys_content_t,s0)
>  /usr/share/htdig(/.*)?	gen_context(system_u:object_r:httpd_sys_content_t,s0)
>  /usr/share/icecast(/.*)?	gen_context(system_u:object_r:httpd_sys_content_t,s0)
 
I believe we want to add fc entries in the git module instead.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com