Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

pagure: give selinux a little more permissions

Browse source 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
This commit is contained in:
Pierre-Yves Chibon 2021-02-02 16:47:57 +01:00
parent 07b30b3990
commit 6969128d11
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
roles/pagure/files/selinux/pagure.te
View file

@ -1,4 +1,4 @@
module pagure 1.2;
module pagure 1.3;
require {
type gitosis_var_lib_t;
@ -35,6 +35,7 @@ allow httpd_t var_log_t:file { open rename unlink };
#!!!! This avc can be allowed using the boolean 'domain_can_mmap_files'
allow httpd_t var_t:file map;
allow httpd_t var_t:file { getattr open read ioctl };
allow httpd_t var_t:file { lock unlink write };
#============= postfix_cleanup_t ==============
allow postfix_cleanup_t var_run_t:sock_file write;