diff --git a/roles/distgit/files/cgi-nfs.pp b/roles/distgit/files/cgi-nfs.pp index a0df2ccccc..116536a06b 100644 Binary files a/roles/distgit/files/cgi-nfs.pp and b/roles/distgit/files/cgi-nfs.pp differ diff --git a/roles/distgit/files/cgi-nfs.te b/roles/distgit/files/cgi-nfs.te index 5ba0dfe4f6..3274b1fcb3 100644 --- a/roles/distgit/files/cgi-nfs.te +++ b/roles/distgit/files/cgi-nfs.te @@ -1,20 +1,20 @@ -policy_module(nfscgi, 1.0.0) +policy_module(nfscgi, 1.0.1) require { type httpd_git_script_t; type git_script_t; type git_system_t; type httpd_git_content_t; + type git_user_content_t; type nfs_t; class dir { create write search add_name remove_name getattr open }; class file { create write rename setattr read open }; } - allow git_system_t httpd_git_content_t:dir { getattr read open }; allow git_system_t httpd_git_content_t:file { read open getattr }; - - +allow git_system_t httpd_git_content_t:lnk_file { read open getattr }; +allow git_system_t git_user_content_t:lnk_file { read open getattr }; allow httpd_git_script_t nfs_t:dir { write }; allow git_system_t httpd_git_content_t:dir { search };