Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Update upload_cgi and add cgi-nfs for pkgs

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2015-06-05 09:02:09 +00:00
parent 37a27645fc
commit 4b22cd9f2a
5 changed files with 33 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

23
roles/distgit/files/cgi-nfs.te Normal file
View file

@ -0,0 +1,23 @@
policy_module(nfscgi, 1.0.0)
require {
type httpd_git_script_t;
type git_script_t;
type git_system_t;
type httpd_git_content_t;
type nfs_t;
class dir { create write search add_name remove_name getattr open };
class file { create write rename setattr read open };
}
allow git_system_t httpd_git_content_t:dir { getattr read open };
allow git_system_t httpd_git_content_t:file { read open getattr };
allow httpd_git_script_t nfs_t:dir { write };
allow git_system_t httpd_git_content_t:dir { search };
allow httpd_git_script_t nfs_t:dir { create write add_name remove_name };
allow httpd_git_script_t nfs_t:file { create write rename setattr };
allow git_script_t nfs_t:file { unlink link };