Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Update policies to be compatible with RHEL7

Browse source
This commit is contained in:
Patrick Uiterwijk 2015-03-12 15:20:16 +00:00
parent 55d739035e
commit 8d3fc995d8
2 changed files with 8 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
roles/distgit/files/upload_cgi.pp
View file

Binary file not shown.

14
roles/distgit/files/upload_cgi.te
View file

@ -1,11 +1,13 @@
policy_module(upload_cgi,1.0.0)
policy_module(upload_cgi,1.1.0)
gen_require(` type httpd_git_script_t ; ')
type upload_cgi_tmp_t;
files_tmp_file(upload_cgi_tmp_t);
allow httpd_git_script_t upload_cgi_tmp_t:file manage_file_perms;
files_tmp_filetrans(httpd_git_script_t, upload_cgi_tmp_t, file);
require {
type httpd_git_script_t;
type git_script_tmp_t;
}
files_tmp_file(git_script_tmp_t)
allow httpd_git_script_t git_script_tmp_t:file manage_file_perms;
# Do not audit attempts to read the process state (/proc/pid) of all domains.