WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-07-16 11:40:28 +08:00
Code Issues Packages Projects Releases Wiki Activity

Update policies to be compatible with RHEL7

Browse Source
This commit is contained in:
Patrick Uiterwijk
2015-03-12 15:20:16 +00:00
parent 55d739035e
commit 8d3fc995d8
2 changed files with 8 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

BIN
roles/distgit/files/upload_cgi.pp
View File

Binary file not shown.

14
roles/distgit/files/upload_cgi.te
View File

@@ -1,11 +1,13 @@
policy_module(upload_cgi,1.0.0)
policy_module(upload_cgi,1.1.0)
gen_require(` type httpd_git_script_t ; ')
type upload_cgi_tmp_t;
files_tmp_file(upload_cgi_tmp_t);
allow httpd_git_script_t upload_cgi_tmp_t:file manage_file_perms;
files_tmp_filetrans(httpd_git_script_t, upload_cgi_tmp_t, file);
require {
type httpd_git_script_t;
type git_script_tmp_t;
}
files_tmp_file(git_script_tmp_t)
allow httpd_git_script_t git_script_tmp_t:file manage_file_perms;
# Do not audit attempts to read the process state (/proc/pid) of all domains.