2018-01-01 11:34:16

by Christian Göttsche

Subject: [refpolicy] [PATCH] apache: update

---
apache.fc | 1 -
apache.te | 1 +
2 files changed, 1 insertion(+), 1 deletion(-)

diff --git a/apache.fc b/apache.fc
index 67bf2a27..b7a24f64 100644
--- a/apache.fc
+++ b/apache.fc
@@ -196,7 +196,6 @@ ifdef(`distro_suse',`
/var/www(/.*)?/nextcloud/config(/.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
/var/www(/.*)?/nextcloud/data(.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
/var/www(/.*)?/nextcloud/apps(/.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
-/var/www(/.*)?/nextcloud/\.htaccess -- gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
/var/www/perl(/.*)? gen_context(system_u:object_r:httpd_sys_script_exec_t,s0)
/var/www/sessions(/.*)? gen_context(system_u:object_r:httpd_cache_t,s0)
/var/www/svn(/.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
diff --git a/apache.te b/apache.te
index fcf795f1..11cbd609 100644
--- a/apache.te
+++ b/apache.te
@@ -503,6 +503,7 @@ fs_search_auto_mountpoints(httpd_t)

fs_getattr_all_fs(httpd_t)
fs_read_anon_inodefs_files(httpd_t)
+fs_rw_inherited_hugetlbfs_files(httpd_t)
fs_read_iso9660_files(httpd_t)
fs_search_auto_mountpoints(httpd_t)

--
2.15.1

2018-01-03 21:49:04

by Chris PeBenito

Subject: [refpolicy] [PATCH] apache: update

On 01/01/2018 06:34 AM, Christian G?ttsche via refpolicy wrote:
> ---
> apache.fc | 1 -
> apache.te | 1 +
> 2 files changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/apache.fc b/apache.fc
> index 67bf2a27..b7a24f64 100644
> --- a/apache.fc
> +++ b/apache.fc
> @@ -196,7 +196,6 @@ ifdef(`distro_suse',`
> /var/www(/.*)?/nextcloud/config(/.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
> /var/www(/.*)?/nextcloud/data(.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
> /var/www(/.*)?/nextcloud/apps(/.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
> -/var/www(/.*)?/nextcloud/\.htaccess -- gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
> /var/www/perl(/.*)? gen_context(system_u:object_r:httpd_sys_script_exec_t,s0)
> /var/www/sessions(/.*)? gen_context(system_u:object_r:httpd_cache_t,s0)
> /var/www/svn(/.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
> diff --git a/apache.te b/apache.te
> index fcf795f1..11cbd609 100644
> --- a/apache.te
> +++ b/apache.te
> @@ -503,6 +503,7 @@ fs_search_auto_mountpoints(httpd_t)
>
> fs_getattr_all_fs(httpd_t)
> fs_read_anon_inodefs_files(httpd_t)
> +fs_rw_inherited_hugetlbfs_files(httpd_t)
> fs_read_iso9660_files(httpd_t)
> fs_search_auto_mountpoints(httpd_t)

Merged.

--
Chris PeBenito