File selinux/rocketgit.te.tmpl changed (mode: 100644) (index 450799e..87bec49) |
1 |
|
policy_module(rocketgit,1.0.106) |
|
|
1 |
|
policy_module(rocketgit,1.0.112) |
2 |
2 |
|
|
3 |
3 |
######################################## |
######################################## |
4 |
4 |
# |
# |
|
... |
... |
files_search_var_lib(rocketgit_t) |
39 |
39 |
# Allow rocketgit_t to manage .ssh/authorized_keys |
# Allow rocketgit_t to manage .ssh/authorized_keys |
40 |
40 |
ssh_manage_home_files(rocketgit_t) |
ssh_manage_home_files(rocketgit_t) |
41 |
41 |
|
|
|
42 |
|
# Allow apache to write authrorized_keys[.tmp] file(s) |
|
43 |
|
allow httpd_t user_home_dir_t:file { create getattr open rename setattr write }; |
|
44 |
|
userdom_manage_user_home_dirs(httpd_t) |
|
45 |
|
|
42 |
46 |
type rocketgit_exec_t; |
type rocketgit_exec_t; |
43 |
47 |
domain_entry_file(rocketgit_t, rocketgit_exec_t) |
domain_entry_file(rocketgit_t, rocketgit_exec_t) |
44 |
48 |
|
|
|
... |
... |
allow httpd_t rocketgit_t:unix_stream_socket connectto; |
142 |
146 |
type rocketgit_lock_t; |
type rocketgit_lock_t; |
143 |
147 |
files_lock_file(rocketgit_lock_t) |
files_lock_file(rocketgit_lock_t) |
144 |
148 |
manage_files_pattern(rocketgit_t, rocketgit_lock_t, rocketgit_lock_t) |
manage_files_pattern(rocketgit_t, rocketgit_lock_t, rocketgit_lock_t) |
145 |
|
#read_files_pattern(httpd_t, rocketgit_lock_t, rocketgit_lock_t) |
|
146 |
149 |
filetrans_pattern(rocketgit_t, rocketgit_lock_t, rocketgit_lock_t, file) |
filetrans_pattern(rocketgit_t, rocketgit_lock_t, rocketgit_lock_t, file) |
|
150 |
|
# we need php-fpm to be able to take locks |
|
151 |
|
manage_files_pattern(httpd_t, rocketgit_lock_t, rocketgit_lock_t) |
|
152 |
|
filetrans_pattern(httpd_t, rocketgit_lock_t, rocketgit_lock_t, file) |
147 |
153 |
|
|
148 |
154 |
|
|
149 |
155 |
# conf |
# conf |