xaizek / rocketgit (License: AGPLv3+) (since 2018-12-09)
Light and fast Git hosting solution suitable to serve both as a hub or as a personal code storage with its tickets, pull requests, API and much more.
Commit eef3699ae6563e7b7ea30b9e688f498e38543529

SELinux: no need for rocketgit-log folder; allow httpd server to write log files
Author: Catalin(ux) M. BOIE
Author date (UTC): 2016-09-25 20:28
Committer name: Catalin(ux) M. BOIE
Committer date (UTC): 2016-09-25 20:28
Parent(s): f54af2c20ebd4df3b3424cab2e0bfb80aa8bafe6
Signing key:
Tree: b70bc24bb8d87f88c6e110480b969e589bf0769a
File Lines added Lines deleted
selinux/rocketgit.fc 0 1
selinux/rocketgit.te.tmpl 4 1
File selinux/rocketgit.fc changed (mode: 100644) (index 12ca71b..157316e)
6 6 /etc/rocketgit(/.*)? gen_context(system_u:object_r:rocketgit_conf_t,s0) /etc/rocketgit(/.*)? gen_context(system_u:object_r:rocketgit_conf_t,s0)
7 7
8 8 /var/log/rocketgit(/.*)? gen_context(system_u:object_r:rocketgit_log_t,s0) /var/log/rocketgit(/.*)? gen_context(system_u:object_r:rocketgit_log_t,s0)
9 /var/log/rocketgit-web(/.*)? gen_context(system_u:object_r:httpd_log_t,s0)
10 9
11 10 /var/lib/rocketgit(/.*)? gen_context(system_u:object_r:rocketgit_var_t,s0) /var/lib/rocketgit(/.*)? gen_context(system_u:object_r:rocketgit_var_t,s0)
12 11 /var/lib/rocketgit/locks(/.*)? gen_context(system_u:object_r:rocketgit_lock_t,s0) /var/lib/rocketgit/locks(/.*)? gen_context(system_u:object_r:rocketgit_lock_t,s0)
File selinux/rocketgit.te.tmpl changed (mode: 100644) (index 954ee06..b6ce855)
1 policy_module(rocketgit,1.0.104)
1 policy_module(rocketgit,1.0.105)
2 2
3 3 ######################################## ########################################
4 4 # #
 
... ... read_files_pattern(httpd_t, rocketgit_usr_t, rocketgit_usr_t)
105 105 type rocketgit_log_t; type rocketgit_log_t;
106 106 files_type(rocketgit_log_t) files_type(rocketgit_log_t)
107 107 manage_files_pattern(rocketgit_t, rocketgit_log_t, rocketgit_log_t) manage_files_pattern(rocketgit_t, rocketgit_log_t, rocketgit_log_t)
108 # Allow httpd(php-fpm) to create log files - note that it will run as
109 # 'rocketgit' user.
110 manage_files_pattern(httpd_t, rocketgit_log_t, rocketgit_log_t)
108 111 logging_log_filetrans(rocketgit_t, rocketgit_log_t, file) logging_log_filetrans(rocketgit_t, rocketgit_log_t, file)
109 112 # below line tries to allow httpd to create err-* files in /var/log/rocketgit-web # below line tries to allow httpd to create err-* files in /var/log/rocketgit-web
110 113 #filetrans_pattern(httpd_t,dirtype?,rocketgit_log_t, file) #filetrans_pattern(httpd_t,dirtype?,rocketgit_log_t, file)
Hints

Before first commit, do not forget to setup your git environment:
git config --global user.name "your_name_here"
git config --global user.email "your@email_here"

Clone this repository using HTTP(S):
git clone https://code.reversed.top/user/xaizek/rocketgit

Clone this repository using ssh (do not forget to upload a key first):
git clone ssh://rocketgit@code.reversed.top/user/xaizek/rocketgit

You are allowed to anonymously push to this repository.
This means that your pushed commits will automatically be transformed into a pull request:
... clone the repository ...
... make some changes and some commits ...
git push origin master