WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-03-20 03:57:02 +08:00
Code Issues Packages Projects Releases Wiki Activity

Tell selinux to allow git-daemon to follow symlinks, please.

Browse Source
This commit is contained in:
Ralph Bean
2016-03-21 16:03:12 +00:00
parent c5143cfbab
commit 3310672c58
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

BIN
roles/distgit/files/cgi-nfs.pp
View File

Binary file not shown.

8
roles/distgit/files/cgi-nfs.te
View File

@@ -1,20 +1,20 @@
policy_module(nfscgi, 1.0.0)
policy_module(nfscgi, 1.0.1)
require {
type httpd_git_script_t;
type git_script_t;
type git_system_t;
type httpd_git_content_t;
type git_user_content_t;
type nfs_t;
class dir { create write search add_name remove_name getattr open };
class file { create write rename setattr read open };
}
allow git_system_t httpd_git_content_t:dir { getattr read open };
allow git_system_t httpd_git_content_t:file { read open getattr };
allow git_system_t httpd_git_content_t:lnk_file { read open getattr };
allow git_system_t git_user_content_t:lnk_file { read open getattr };
allow httpd_git_script_t nfs_t:dir { write };
allow git_system_t httpd_git_content_t:dir { search };