From 8d3fc995d828c673e9e7535cac397ddee95ee0ee Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk Date: Thu, 12 Mar 2015 15:20:16 +0000 Subject: [PATCH] Update policies to be compatible with RHEL7 --- roles/distgit/files/upload_cgi.pp | Bin 65035 -> 64835 bytes roles/distgit/files/upload_cgi.te | 14 ++++++++------ 2 files changed, 8 insertions(+), 6 deletions(-) diff --git a/roles/distgit/files/upload_cgi.pp b/roles/distgit/files/upload_cgi.pp index 2b472f7aab7528d7644f8748686e26673455c161..870267272e687467412dc8b8c3d06e39d6748c26 100644 GIT binary patch delta 244 zcmeDF!+iJ`vrzy4nxBje3=B*R3=AR+3=CVIP84!vG1N0~n9SHOyfI5mTZ@f>fgvTc zI58ki1MyfG7#P?Y7#OlMb8z>tzz zoS2l8%ErLJz|O$HkeUbLu`n<&ure?(WM}5&fY@xCS82ENu<|f4Fz`$^v#8y?-@=z^ z@h0lT9IPN~nI;P~x=j94m$La!oj51+-~Wu0@AWE9eqYBkIlqo~b3g|V<7Ayq ssm*1bQ(3^G`nDXCt?PI;%lC<~i3%_h($ diff --git a/roles/distgit/files/upload_cgi.te b/roles/distgit/files/upload_cgi.te index f58050d1dc..bd87580806 100644 --- a/roles/distgit/files/upload_cgi.te +++ b/roles/distgit/files/upload_cgi.te @@ -1,11 +1,13 @@ -policy_module(upload_cgi,1.0.0) +policy_module(upload_cgi,1.1.0) -gen_require(` type httpd_git_script_t ; ') -type upload_cgi_tmp_t; -files_tmp_file(upload_cgi_tmp_t); -allow httpd_git_script_t upload_cgi_tmp_t:file manage_file_perms; -files_tmp_filetrans(httpd_git_script_t, upload_cgi_tmp_t, file); +require { + type httpd_git_script_t; + type git_script_tmp_t; +} + +files_tmp_file(git_script_tmp_t) +allow httpd_git_script_t git_script_tmp_t:file manage_file_perms; # Do not audit attempts to read the process state (/proc/pid) of all domains.