From 4b22cd9f2a7fa0a740a0defa2f3b2cdb62dc1cd3 Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk Date: Fri, 5 Jun 2015 09:02:09 +0000 Subject: [PATCH] Update upload_cgi and add cgi-nfs for pkgs Signed-off-by: Patrick Uiterwijk --- roles/distgit/files/cgi-nfs.pp | Bin 0 -> 62147 bytes roles/distgit/files/cgi-nfs.te | 23 +++++++++++++++++++++++ roles/distgit/files/upload_cgi.pp | Bin 65065 -> 64965 bytes roles/distgit/files/upload_cgi.te | 9 +++------ roles/distgit/tasks/main.yml | 7 +++++++ 5 files changed, 33 insertions(+), 6 deletions(-) create mode 100644 roles/distgit/files/cgi-nfs.pp create mode 100644 roles/distgit/files/cgi-nfs.te diff --git a/roles/distgit/files/cgi-nfs.pp b/roles/distgit/files/cgi-nfs.pp new file mode 100644 index 0000000000000000000000000000000000000000..a0df2ccccc0240612f7b653a561787efe26b587d GIT binary patch literal 62147 zcmeI52b?5D`TkD~D54_fJc{AaIRry3Wq@?v6J*vrM?XRTRuQ=bUrS zSuy9FbIv)7>HhCi&(u5J*YCoe!14M2pg+v*JQcrBb#+yB&rtJ(ou{33u}zyc?IW)% z%Pac!rcIBNuq(*>6K~VFW2ZOX(Kxo>9(M~QxuU#~{L=EmaVdHA7Kg2+&L!pD?ADpB zGjsB0*CUhwyify<8_MfilNWTa7yEB>}_FLPE(Pbt48i?zz4438yMYp+* z+V+!Ib9J@owJ#y>kZ7UPYws(6_m@|z-|H2v5fUQ0H7J^+0%#YP*V>>nDqsv%v)IvS zot2^>m_j`ZMR#$~UqLo_?etrt?q%f7Rpr%dt`zgA@$w?BiGT@Sv%Na#Y)3Iy*HBj> zSgs_mp&*a?r~|DqC|cX+#TfKeCb7^kf{K@lQFAmJK%#&lCElXqW~)`KI+w5`Y5S`q z_{Av_%Wb4PKwgqfVo(Q8+;Dk3YWLTA&eGfoeRME_u0zz4ViH|YeU{@I^FBzI@9-{vVr z8@Q8Ktf2^S?~N0Oe(QQ9y4Hk!ubfO&f&-PKHT|iSZg?sh2kp@u%GKDBiwLcOt6_Rc zA;k4?q(z?^_c}Y|LT$RM5nZue3`c|hI?BQISL)NKdeW!y7AMMQ1Vzz1bzF=KyhY)z zU{@82!GR)i^6|pa?hH@{uF%1Xh-#mMLN#PZUR*@Qj-oZ*Wppt588YG&VSqwGNHXq0 zRk|0Fp!0ADL#G@LkrX{>P^|Q~7xNf9P&x9I+5&}6+QMI%&34 zmA)GR%a=T^Q%NS(piB-c%|UA!7Le7vz!8DbVWmIrjru*L#YNPYAr?^>Mot~~N6o&w zAaI!v*P5$LC}PuAd7)$Ag=4iS1}Fp?BMdy?Kx4p*p92=U+vXQLU5APj%|U%{ohqD` z@~MK=jn4~W!F`VHzNamXVfY+d+P5HD2|XMy9IfTS1=xb1D7PT!(5li+2kWc-4twkQ z-KOZCXvE3IJm2fjj|R=&(CF2;9?r3?{Qz?vNsOTfFC3lK7T%)Ry*nh<$3Wj5z*D}U zy0U<}=z@|)ImeTXvxoy@=k+Ep=+!|V!#2hsOb{|gx0U~?z&twS8;YRhspTg8V@kU`#D2G zWL@pnuc!q5QG&J=>kQKYzO&TnEo0!vbispC?^mPA9MUgTgyqgbq3P|k4F9VYy zHX2O8K-1a5`VWPy6f0;99EZvaiSWW9U7)$p>2^lz0dR3Ti`9O2t+}ljyYr8UZl&3p zmnnWQ=(G#Kq1_SIY_D|Oyy-f``mozyf+@IJz-&A}91n3XgObtGD0RNsZ4Oq@kU(hl zSEO66bcV(JwqnpLx+oe4TBAJgF1AqzLdHWksmi-eHQ( zaRZO!$R>*fJZwW0=Q$47(8B^Z&^WO;8uG$A3oji0Buf`3)IA-L9iwZ9s zT*S(7JlNi8xu@}n;YI6~E5rHb5cgZSU}YsMN>|o?ti{6Kx(o-ha4pW?bAI+??S=0m z^aC<(YH>Z_g=4tv9>=4H@7?Dm=-hz7-4*^~dY?W&_5=Ar5^BxX!$RhT@s10!5B;B- zuYGsGS!qmO@~3oDjULjFm(0P7a;puAQ-<6A$-@`qU6hZliUHPc810Aa!}*1Ne}pjx zj{%_ZNuGRove>l=XqHhqBNXpByzXoU~+eV5+ILIr5uE~56C1$9;?e|oyg># zRY(ZdmwhY@F;KO4xzWeiDbEJy9Un+>`tYy>Ll`a&WWYxoGU8z+fr8zGc_~J#f^ur|@00SSq^kn#i#v=^Z03AN|#|X73&DU{Ho^V~R zY?B4HUmi(J>2ZpvF%#keQ@3aiopnH=Zr5G_!HCO;y>4Xzb7(YPES;5=@u<1bb!&Kx z(ZJz@8We=*W6Ue(M?Megf*K{D-Ef)0zIzCU#x92av8=rPINMs5mi6QQjU=Hp?sry` z#kC9an!WIi`*4h7i@eIGgm+SMQVVzAgif+oAMN1!!VrO5O7}Va-WpEPiO~@53j%xd zQ(U;kfy=CXCgl3XJ&vrY2E|&l+r8-e*qdLAKtIHRZh_&;4`F!fdC^n3-FhmA85svU zb$PAkR&(v8!TEiA=ck|x!DAIn{x~+vtK8In4B6ISxUYPzYJOa7myf6}$dP1k4d+P zxgQh^?ef8#D?`@1zN5QufFLc6tHd&P+;bAc8k$2t?7>1B#|`9V%|1I82j}xs7*B6s zrWd}InLi^pmNQ~q%kAFaqAU2k`aUGC794@RaB1R&WAb>*k0SW004^I`N%DF1Xzae9 zf{=D+h&v~|MMst|Z;3)Sl#KgGyho{Bxiv&8Xu0}C`Hn9I4%{uQ#ON8vna3dy#xEMK z-M#&}|MDvu90#tj@^CG)WM>fpNN{dGzry)NImMFP2D>hT@wU@*5}g18v-@K01|M#r z(^Nj(LMHui3pe99@cf}XGVn_Q7j={KsGHyn;y6TJc!-S`4*8CWe3N4&>nNO6gs!YK zSLg3n4Eh)saNt=E&M{s%9@_pHCnb zHS?wh-3FrvKSPtxa%48=_oo0fDDasb-k}GVZhYL5*WLK|HW>HX#bT#dxNmg9G(IZo z$ak{PNkM=+Ba{M@LV~YY!8f9TwA}2v9*+@?E;V6~jJ1uyWT4ix6&@!GTJV z+mCVX3(@i&V3dO#_*yQ$Y#@ueg<^nIFy=$$dkX`k1fCD$d4pHiVDcqse#Z=UKqg<2 zmPf;r%M~jc_>(1%3zw$E+7ZF<=gXWthC$V6I!P@}>>38A0XK>Ba!Geu>nMwjQ3(Q# zWD;}o{}(k^AYB)mm}_o_0la{W7#x#lfrB}x_|Hb~eUfrK%0ihq*o)>}S#zR&9X=jm z{+RP`N`K2?uv~tjEMHzZo&5i*^CL6{&f`Xjmhk_fx<_#HBi!%d3~iKlc{EyW&m)IB zd-8yEga_O{xy3NeBH!`vtV#|5!L`pNZ#T{1pUL5XCTV?`|LgPkRvXSBWX?z9FZku< zYd}zI1`U9oful7$gEWN`PR^h)e~C15Nc4;g`13Si)&=}$8W6Z5`ph9&Sme5D#y>=L z=+Zw#FjRL4%gNOj`$YgDIBzfE=K^aoVu&LM7hakNUDE4pkHP0ji1n2-U?5YL@q5)x`a* zYT|xfHF1Banz+AKOSOrFHlX~SE(lM zTT~PGwjP(s-{+%K;(lB;alfdVxZhSy+@Go@?(bC-_bk=Ky|^EWQr3St)x^D;YU19> z<1+gCJ~|`r%~TUNR!!Vnt0wL-s)>7|YU18YHF1|z6Zcfr=r2UQdI)2fO4Rn^4(zUq7iCuVYTWFEjo@+%)J6Ui)Q znnmwscE%<6%QV5P3;6FeAehB_Op!QbVnG3`PB`iG{Zt1|KU8(-^y5`WPCrw1?DUIO zCr-asb?WrnRcB70sXBN1Q(gx%4i`60I9kN{3KgVF{yo)<|AlJe{z)})|E-$1m-0hZ zK->dV6Ze{`iF-rU#NFz3NZf`mpVem?P23|?6Zej)nf@-SiF+T_#J#U-;*L}k_kpU3 z`$*NqeX`dPac}BzS>1Crnz%1lP24xCChogcGyg|a6ZdnfiTe%J#Ql+K;{HZ8asTFZ zOx(!hvUq=Sv|{4!=SQ-bxK~z9-0P|)?q=02FHlX~Tc{@P(W;4if@-uA1e)P&IL1t(v%RRZZOYdz}*Zb{?16KcUgY{gP_p zen&NNf2Nwae^5=_f2t<#CH%;gvcAi!ChpZ$6ZZyQXT-g;$7S*@8cp0pHF4)u6ZiJ2 ziF=Z2;@(>|ahFvScc7Z}pQf6)5BEAJ?may&qo1hJ#C^7E;=WWhabK^RxbIX=+z+WH z?q^gJ_iL(&`vcXvn1U~qoqmbx#Oc?mPMv;->dfg6s?OboJ;9Z!18zR;V}lu|zp9$> zcod7HMcD6CLAvC>R89Clt0w$^R1 zub`T^*HBH|gS^g&dx&b{p6GFzJ=JL99()j^2D@XQ!Ti_s6Kf^^BBs5)}`*{Wlw zU#dEB`t_<)r{AeMbNWN7bEiM!bwJ#&sV2`4R1+6p_`}hn+h0*Zy5jz#nz;W}P25ZS zu`3|%fvSmnZPmoRvFhB7Lug?fEmxa+=IIpS5A&%*!XKrY@HcRIk=tcIPNS*srkd~z zstMm!P5AAq34exa!arIy+xn?qN5p-;YT~|9HF39iT;jZ0qlx=o)r|j`YT|xDHF3YC znz%nvP2At9ChkAHj)}XEAF5*F?ys7-iN|I2SJi0ZHdGV$rmC4fQcc`jsV462R1^2k zs)>6~uM^@fswVELYU0j$Tvm5KjVA6xRTKB|s)_qd)y)55)x>?RYT~|KHF3}MIwkI> zR1^0rs)>7hkIUk}r_sdyg=*sdNi}i*t(v%(@&j4Q@(xf<+-s^P?hU=ph`UuaaWmD# zJ;~#;xFa;0xOY@d+`FhI?tN4f_r9u$J5tT^AE=tRkMuex?vqs$_qnQxdvA}+>@U}7 z;=WNeao??)xF1nX+|Q{d?l)8u_eZL8H;eq%Ynf*v%rk$V2Fykn^g14JcE;(UYQ{f6 zb>QM3p*oCE7CuJA(PHu^Q9-)o&ruya{W8^w({E6nI{hxynbRLuojd(muLI(KT{Y|f zp=#p(S~YR;={SxSqyI_;>5AW}nz)zoLsdZBE2$>#byO4gCaQ@$>vc%no2w@7ZB&!z zc-6!`$n%5_@9r8++?HzMuBayNnrh-cNHuXEqdIq^Bzg#rmaFY)J~kr!3se*SRjLX9 z7S)75goR0IuDJJUH1)?-6aI^;3IA=?g#W2(!v9`1+xjf8W8z-ik4!OfFQ=NgS5r;g z)Z-H8`Wj8#o2h1eteUvDR!!VvR1^0^)x^D**9mc#R1^19)x^EOYT_R5aasMtG@7_i zP)*!tsb>0@s3z{~R1^0ds)_qSuT$cFS~YRMs+zdpS54eIcwAQZON}P(pH&n0KdOnl zuOGKk=D(t9;$BNNac|^xM%+VH6E{~)+#^*J_hgUD;*Zs6;@(v?ahs}%yG=E5$EsQ0 z>8gqQD6ezkK1DTgpQoC*uTV|gd5_ED-lWmQeUED5epEGaKd+j&-&9T9AFIyYEb=?A zWm<_bX#8UuFdJi9xvvMBopE}kn(+@*9k}>Mst%ogvg#;C*$1e0(a)Vqr(do*ar%v_ zQ>WjpI&=CXs&l75=XF5bZ>T2jk5m))H>!#IH`T<&m#=ZOnB096gVI&EpC76M;$B%b zaj&bIxSLfIH}EH*$EN&}ia*Ni}i5qnfxsQ%&4IsLtJ>j&DWb zXt~n=>0@KUU&4<}G2t(-n($XwP52wACVa-irF2*P7LBG(R1x8(=s);*LP2AH|6Zhe&iF<^{CC(Eynz+wa&G?t9ChqH16Zf5}iTfe1Q{sL`HF3YD znz%nuP269pChi?QF022GMickHs)>7PKW?Q=f1qmOURyPBZ|rqOT=%6Qbd`*_hiN=< zk5WzC<5Uy(E*_WF-A$v3yP%r5UDd?huA2GJP)*!Ndz};asj7+leAUE#rE227Sv7I* z<8fL1do`N4A5%@-FQ_K&w^S4NC#rKdi~QbenN|`^D`!muW)n;++dRPRjMHP)j6Yp< z;Nl;pI&}Iesw1bLr#enh*A-Q}=vPdo({ECpI{hBinbRLtojd(`uLI(KQ#EmateUvL zRZZN#t0wNn{8$ta_gWh7s=KU4Cr)2QHF2+}nz#q6CT{3;NZebhChl!j6ZcN4iF=A_ z;ufljdn1p_d_m8TH`!BC!;$G5^MKN)&pqjYXP)*!}RFmfr)x^y`ZtPBes?o$f zTs3j;pqjWRtIpjVw68DDl{W8V6T){?6Mm?g@DET;_(!NF{F77@{z$FORref?Cj84( z6aEdV3I8tDZ0iquof7x6s)_q`)x`awYU2J{HF5u{nz+Y$T;lB1XyRVRk6S6@ucVr| z*HKN}n|PfO*L~+ls*q{LHOI|0p18MBP2A&E6Zh__iF;R%%j#PiP23gL#9dR(^bb-^ z+{bvG6ZdJViTeW8#C?@&;=V;Sao?w!xJ{4C>OQW~#Qmab;(l8-aet~hceBVJyq0Mt z#kBIzX~1lXX{GBcoSkucyK2Utp*nE!k5(Nz{Z!SF)6Z8OJN-)4Ns77;RPCbQJe5wr zS9Rv}$5iJ|f5Gd3xZhGu+@Gi>?(b9+_aCZ>yN@540^;tknz+~2^sf4=YIN#!Lp5=4 zs+zcw*CBClrJA_6Q%&4Et0wL}RTFnnHE~x}6Zgg*m)Y;9(ZqeIYT`a#HF2Nmbwu13 zt0wMiRTKB^s#)Kes)_q4)x`aZYU0j#TqggXMiciJs)_q2)x`a`*D-M~<;S9!xCf{v z?ln~t_lBxj|5nw+%~TWjFptaVBQ%=0cT`Q>yQn7aeY{SHdtcSW9jPYn1633Ek*bON zWYy$(u4>{Q<#7|&S6{Bt#C@Y`;=WsT?k3Pn`|K|FM|^Bb_|K^({5Mn+{zs|_{~OhW z|C?&UZ}J0EO8Dcnc31s=8cp~st0w$)RkN)(dz}&2eIH4RlxfA4cMFXt?$N4=dxC1> z-a|EU+p39sH;+r4o<vc}tr>iFJ3sn>M)vAg6R@KCPziQ%sLN#$0 zJT9yMl13BvJF1EMGu649MgHiuOe-0tm48hGW;0AHE53r+8K>7&GyXxU0~h}o)uGc* zQyn?|0@bn8uTq^j{T9_}29_(ScG2&fN~b@rI(PbuUI)bewrb-3R5fvbubQ}LsV45l z{m2v$_j0Oy^iL0IM>(c%;}q{CT{F?NZebiChjq+iF=}I;@(R&ahFsR_f*xy zy}xSW-o)dwxQA&pai5@?xXac4a) zv;R_~iTh{O#Ql%gF>&|xLsd-NE2<{$wNw-LMygrgp{j|St0wM|s)>7ZkIUr8YBX{0 zs+zb>uM^^KQ%&5lYT}-*nz)ZrP28ubX8q4oP25+gChl!KE~DS1(Zqd^YT|y>>y)^k zS54e+swVD_RTKBOs)_q|)x^D+ABs})Tvj!4kN3E#yR@#N(Zs!;>fBBLm+{G6>Vti3 zMtJviBS|6Cii^Lc#uNUwstJE5)r3DqHQ@`@gzu{+{N0ttRkyCugnx)?w)Nw@&WZaB z)x>>~YT~{|HF4jjnz$cOP25kaChnJ26Sw7YiSu2JChpHw=WZ7Hlh-n>j3}Ri{qBUv-v)?aHcM^e3j$ z=`VR55cfN(iTg9v#QlS6;{H=LaWCOVrhvGYS54fjt0wLZR1^2QTAst(qS3k2iPs@< z=TsB-_Ns|{l4|1KTQzZ)RTFohnz*N_Cho&k6L+)6W${ncXyQKG>xj57RZZO2t0wL{ zRkOSgsV44cR1^1Ws)_pp)x`akYT^bSm&N@>qlx=puVdm~+7DbYaSv2Y+-s{Q?u}Km z{2A56Jxn!mk5WzC<5Uy(79N+`@21hjUGO>~ZdWyNx2q=Z8LElcbef&_Avi|*56ZfjB ziF<;_WpqQMiF;G8Gvc~06iF7DNZh4(D~%`a?Nk%@&Z>!fPu0X-R88Df)#SOKYU19* z<7TeloCv&p{5kp9UpD;kX?M+A4woYJn3H#S`S`P|1LtFlB=BjG z4==Cxk@q;}+`rR*pz-qQ&Z!Rlzjq~%Kj!=!`HS~>`SNzUW8Yf%K9UB<+~nocUk`zD z%(;L0&#v#GeR}`brI8Nd`C0GIoe1~u&nUe=v-BQ?`80E-_h*#epILgpN#Heo>HQg{ z_h**g7-ce+czUjFHuaO`$C2atOD zJ#Np9I5!Hn+kfXq=WB9ecJ(#E++mv?UeV$8+O zwBH(!zjVV5^5Dh4un=`y_quHneJK87H6k0mx<{8j9Ie^zxZ6%2gk-BlQ3=ChZb7!b z#D?)c9sVNR|2lj*9L363YULm#^}ifm4o7E~EywVC*yZ5MqU7l>BA27~k*G!YHAEkZ zwFNg9_96I-(0cpeah3jLZ8_=T5py7EaV|LA5p4gAZF*yW(BqNvGFrBr{$ zv78DY{<=N!D!(gOPH}lxG=8Aj|5#HwwhUMPmAY~oz{$_1m4nJ~)t@FSr$X17o|AG+ zx!UrNB$d0h!DlAEn9>gpY?P$51AaLPdi-SH_Hr<)o$jJuj=_UIskY-j+x8KclfcS`+CBn* zQPy-D=yD8Bz6=88AS9k{<-BXmbhF`d3|6tb?uc8C2eRA8wH&y=1eW(~EytmE_$?@9 zW6^RHdc1G-`t|I3b5ZHd?!tF_>XnPZ0OWU9EQez_L7d-i5ZcGPJlvhHG9JR7J1f}Y z&nL!TSS)YpSB^vPneNA@Tlkfe;PRg)@muzlQ)mT~E&9rFlGz;yg9~oY=TrD?`C2nR z1b@+d^1l(6gD~h}8@_TF%(|`ljKFH{Ny?y-okdm?GR#UB8hIllEH=UtBP=z-G9xUn zgt?Y6@MJr`aw9k!fnhDM@*36x!&+cilWqR$^%~X!!&+ciGf-sfzgiWcVJ$SQg;sfn zwa~B@8rDL?T4-1c4QocVvQ1#kT4Y#@3~P~LEwbt`tVM>k$gma})*{22QH5+NShE%z z)?{nJdOE{eY*>q}dJSu_VJ$YS#fCMbIN5%%hMXAI62n?zSW66RiD50VSPW~4VJ$JN z8Chkk!kV?zu$CIuQo~wmSW69SsbNjFF|4x~)>6ZokxaHVtQD6T)-uCdW?0J%Ynfp! zGpuEXwaj8RtW|^DKrdS$)~w}*wcN0l8`g5eT5ed&4Qsh!EjO&?RUcRxv}VgL{N!E< zk$gn0`J=Uxl)ykHSnCl4DASSc2hLx;L7a3u(5tbNXsS%bLVRqAT4Y#@th|P`$gma})*{1NWLT4JIBV8qE6#G5 z>yQRYY*>p8Yq4Q1w#qZC#fG)muofHEWXsO74cAF!+s<;Bvu0GA7}gTQT4GpB3~Py1 zhhZ%-tR;pu+1|5k!&yrWYep5RVJ$VRrG~ZCu$CIuWc$xLo?$IDtjSiOwY-^O%_uH2 ztYwC^%&?Xj)-uCdW?0KC7Q>os8(OoL8`i9>hPB+VmK)Y`!&+`w%MEL}VJ)xn`87aT z_U6|BR$x#GbbVL08!hK%*sKv&&C7Lxkt{UAA|os|!V)7aHNr9@EU$;j)}%FSfnhB$ ztW|?ttH@TR_2LX`fniOyEv@G@tObU(plZ!6Z|bFmhFRIpv{q|ab>_~aVJx)546~tO zHZ;tJhS|_C8&=J_hL>$mYc?XoT4Y!=kR!udWTi8#MTWJ=uofBCBEy<&ky^7R+oaaR z3~L5nY*>p8Yq6EruofHEV#8W&Sd;BkYc>+YT4Go;P!hvhVpvNIYl&5!VJ$JNC5AQG zdbMUPHLRtEHKW?pu$CIuQo~wmSd*<;>v)E>)UYPowAS)whPBMFW>k?G)-uCdW?0J% zYnfp!v+6ah$(F7)Yq?=9H>_F38P;;cT5ed&4Qsh!EjO&?RTjSnh|1pl8lVz5neL6S zStBek!oo@zmjIO@RuLItu@ROSVW|<88DV)nOty?Iw*lvD!&+ci3k+*kGQ(P6Sd;B! z>nMh`z_1n=)?|CxT6v*iEi{-z!&)`SwNz+W3k_?bVJ$SQg@(1TYR#==>c(U{+M3zO zFdG?WqpCC4MGa$-6=s-?46~78HZsgcRkN;q}bcVIq zuofHEV#Atjb6c~K7}gTQT4Go;@DjsXVpvP8yoR;Ju$CCsWJ}zdwbZbd8rD+7nt_rU z)>6Y-YFLvkbL)79wbZaC+vnEuW`?!Qu$CFtjA}E(T4q?w3~QNTEwkz{tjSipHEX$H zEjO&?hBd1S!&+`w%MEL}VJ$bT<<)xqbnkY@@c#UCUkT(~JY$5-8exGE78+quC5%ge zN)W4!jj+TBOO3G12+QkXvX!s*kH4k z$gma})}pF4x00zFlP!g7W@TI9dYEB0Hq6FVXYT4VjKx-%VKz3*#)jFrYSuNVY(HGH zkr>tz!&+ikOAKoUa$;CZtaOI8#ITka)?};VnzhuhmKxSl!&+)sGw@QwT54F6t&Hn< zhPBkNCfgd<^2*l6^)SO)W?0J%YX(YYSj!A+nPDxn$}_CV7RWUlxnV6gtmTHa+^}X< zYgo$-Yq?=9H>~B=I{b9+b}jM#{B&Ol||2Yq7x`8`i2puCv63wb-y08`k2gHMf$fn~-gxYsM18Y+{&A46})0 zHmN#uSD#@lvBC_qiD5RWnstpQTS(WerG~ZCu$CIuQo~wmSTm4Q!J`RTqA=(?_KXI)OnuvsH4Fv3D3EHc7kBP^+eaS2cfB1&q6Wky(D z50kC0Yt{n8T3}cU3~Pa5O}4|X*I`(*sxYhthPA-3Cfj7!stpZmp;2#WSPKnnp@6x@$HP!&+ikOAKp?VJ$J36T@0H$PFWjVJ$JNB~@!~ zB~v#hTYJ~criR(nFq;}?Q^Ra(n3XNR%k{c3(=e7=VTReXYSuNBYy)1df?@^Txvyn$gYFsucJ zwZO0@+mzSqFsucJHLF^~T3}d{?aOP`hK9A!s3SD2g@(1zuofEDLc^L>g<&l;tjSjA zHEWS!Ei$Y{M!k_?Ei$Y{hPBABW)){xiwtYBEqcwGY>i$IGpxmiwb)>Z4QsJsEjFxK zSq*EkVNJGBuh~cpYl&ekF{~wqwZz~{3~PyD%}QoiOAKqW-FnShYFJARYpG!^HLRtE zHQ9!}Uaw)T8stW~)UcLTt+|yuy;iAg(OwTT%w~q!%rKi7W;4TVR(0m41H)Km zg;mYEMv<-DYc_JjT5ed&4Qsh!EjO&?hPB+VW+5Ba@@hIi-B&j3_0xSNkaOpZ5jJat z1x8qCghfVJY=k97SZai2l`t*=DnYbS-JsZo$yV{T^BWk}0>fHhSPKkmvVDBL4#Qet zSPKkm7K&j_ww13{8yeO^qrA|t78=$!AG(Y8=%W6s=Kzu-;g0jz-0x zH*9Q{OXO_mR_;u{tzJ#^G{*+-*1dz3zHrxw*ZljKhh_LzH6EEa>J zCtbJ>aH!yw7`C!$5ASwM!!I};(ga-30Fw3ky+fuWbvfBqO?Mp9@FKDk9Cdb)sAY0q zCIHitk7|yZOES^a6Er5hIz*`!V z&3?B?_h@Y^Mh8zY_NaFpTkjR6=0}UU$#dE(8l!$=r9bYC+$kUT_?|t)?EpNSw#Esi zZ0L96VW+n=afM{QO?FM!k|r7DjUXL#&gi zbFm}iwZEk>*BX*oZZTG5ZO~chbUUNYo;%?a!rK*H8I~sN2H(2F<<8=$x4Ac7+0yL{M_adU zJM-u+g+bf>}Df6JXu?< z_PcA%L2t7(#<00Gxz%(Of{7Rmnv+Ph@*b=wg_0GBFSGm}9EU^x5wCB;FFqh%nGyK)Q` z80UQ%SW&LXNa>vHW-&5YNLP^mWU^mu%8w{*LGSFZVhP;r${nqa!5ec(1WA9S!x`MUvp zj69VTzl-D1SU{%C{uX?}dC?|jyI|rwNY*kdt6gayUgZO6^C7Rk^S4@Mtkt_)hL4|| z2j5$kr8%YjmUj0HABE?-a@k9}EH>8kQ3Xyq8geq&p?StV*DKwy*J#T4p=-B=b(dCq zvGhGD4B7kJWlrnJZ8vjGo`c9qkn-ERi+GzIvNUUr8W@5Lc@)*?k4Ja}Ba=T?C^A(` z$HJYLd*IS5iniRD^<`lo6E5y<+|z(kQaRlm!ggIsAhA3(*{yazY0?}VzTN%c?)vdr M*JlUb2WnvX8-^I diff --git a/roles/distgit/files/upload_cgi.te b/roles/distgit/files/upload_cgi.te index ea41d80639..f9ba1f3393 100644 --- a/roles/distgit/files/upload_cgi.te +++ b/roles/distgit/files/upload_cgi.te @@ -1,11 +1,11 @@ -policy_module(upload_cgi,1.1.0) +policy_module(upload_cgi,1.2.0) require { type httpd_git_script_t; type git_script_tmp_t; - type git_script_t; - type nfs_t; + type git_script_t; + type nfs_t; } files_tmp_file(git_script_tmp_t) @@ -27,6 +27,3 @@ term_getattr_all_ptys(httpd_git_script_t); term_getattr_all_ttys(httpd_git_script_t); # Do not audit attempts to get the attributes of generic pty devices. term_dontaudit_getattr_generic_ptys(httpd_git_script_t); - -# Allow upload.cgi to make link on nfs -allow git_script_t nfs_t:file { unlink link }; diff --git a/roles/distgit/tasks/main.yml b/roles/distgit/tasks/main.yml index 8a213060a9..bc5b6fc5e9 100644 --- a/roles/distgit/tasks/main.yml +++ b/roles/distgit/tasks/main.yml @@ -328,3 +328,10 @@ command: semodule -i /usr/local/share/selinux/upload_cgi.pp when: selinux_module|changed +- name: copy over our custom nfs selinux policy + copy: src=cgi-nfs.pp dest=/usr/local/share/selinux/cgi-nfs.pp + register: nfs_selinux_module + +- name: install our custom nfs selinux policy + command: semodule -i /usr/local/share/selinux/cgi-nfs.pp + when: nfs_selinux_module|changed