Code Vault

xaizek / rocketgit (License: AGPLv3+) (since 2018-12-09)

Light and fast Git hosting solution suitable to serve both as a hub or as a personal code storage with its tickets, pull requests, API and much more.

Clone URLs: https://code.reversed.top/user/xaizek/rocketgit ssh://rocketgit@code.reversed.top/user/xaizek/rocketgit

Commit bbae4970f9972bdd37199dcf67beceef5f43aa36

SELinux: more fixes to start rocketgit-fpm without AVC errors
Author: Catalin(ux) M. BOIE
Author date (UTC): 2016-09-26 20:49
Committer name: Catalin(ux) M. BOIE
Committer date (UTC): 2016-09-26 20:49
Parent(s): 32c5bf42c158ef5864094a75284115693fe72c03
Signing key:
Tree: d53d29480b10c8aec3374f2f3ae63a656cab1209

File	Lines added	Lines deleted
samples/rocketgit-fpm.service	2	1
selinux/rocketgit.fc	2	0
selinux/rocketgit.te.tmpl	2	1

File samples/rocketgit-fpm.service changed (mode: 100644) (index 1caf2f2..81fccc3)
...	...	PIDFile=/run/php-fpm/rocketgit-fpm.pid
16	16	ExecStart=/usr/sbin/php-fpm --fpm-config /etc/rocketgit/php-fpm.conf	ExecStart=/usr/sbin/php-fpm --fpm-config /etc/rocketgit/php-fpm.conf
17	17	ExecReload=/bin/kill -USR2 $MAINPID	ExecReload=/bin/kill -USR2 $MAINPID
18	18	PrivateTmp=true	PrivateTmp=true
19		NoNewPrivileges=yes
	19		#Seems I get a denial
	20		#NoNewPrivileges=yes
20	21
21	22	[Install]	[Install]
22	23	WantedBy=multi-user.target	WantedBy=multi-user.target

File selinux/rocketgit.fc changed (mode: 100644) (index 157316e..9f689f4)
15	15
16	16	/usr/share/rocketgit/scripts/worker.* gen_context(system_u:object_r:rocketgit_worker_exec_t,s0)	/usr/share/rocketgit/scripts/worker.* gen_context(system_u:object_r:rocketgit_worker_exec_t,s0)
17	17	/usr/share/rocketgit/scripts(/.*)? -- gen_context(system_u:object_r:rocketgit_exec_t,s0)	/usr/share/rocketgit/scripts(/.*)? -- gen_context(system_u:object_r:rocketgit_exec_t,s0)
	18
	19		/usr/lib/systemd/system/rocketgit-fpm.* -- gen_context(system_u:object_r:httpd_unit_file_t,s0)

File selinux/rocketgit.te.tmpl changed (mode: 100644) (index b6ce855..450799e)
1		policy_module(rocketgit,1.0.105)
	1		policy_module(rocketgit,1.0.106)
2	2
3	3	########################################	########################################
4	4	#	#

...	...	gen_require(`
9	9	# really needed httpd_log_t?	# really needed httpd_log_t?
10	10	type httpd_t;	type httpd_t;
11	11	type httpd_log_t;	type httpd_log_t;
	12		type httpd_unit_file_t;
12	13	type system_mail_t;	type system_mail_t;
13	14	type unconfined_t;	type unconfined_t;
14	15	role unconfined_r;	role unconfined_r;

Hints

Before first commit, do not forget to setup your git environment:

git config --global user.name "your_name_here"
git config --global user.email "your@email_here"

Clone this repository using HTTP(S):

git clone https://code.reversed.top/user/xaizek/rocketgit

Clone this repository using ssh (do not forget to upload a key first):

git clone ssh://rocketgit@code.reversed.top/user/xaizek/rocketgit

You are allowed to anonymously push to this repository.
This means that your pushed commits will automatically be transformed into a pull request:

... clone the repository ...
... make some changes and some commits ...
git push origin master