From f3a1c52522270037871f55f3b5d46bf70f4f24da Mon Sep 17 00:00:00 2001 From: Pierre-Yves Chibon Date: Tue, 10 Nov 2020 15:53:18 +0100 Subject: [PATCH] distgit: ad missing instruction in the http_policy Signed-off-by: Pierre-Yves Chibon --- roles/distgit/files/http_policy.te | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/roles/distgit/files/http_policy.te b/roles/distgit/files/http_policy.te index 77f61b74f8..eae0190259 100644 --- a/roles/distgit/files/http_policy.te +++ b/roles/distgit/files/http_policy.te @@ -1,4 +1,4 @@ -module http_policy 1.0; +module http_policy 1.1; require { type gitosis_var_lib_t; @@ -27,4 +27,5 @@ allow httpd_t git_content_t:dir { add_name remove_name write }; allow httpd_t git_content_t:file { create rename setattr unlink write }; allow httpd_t gitosis_var_lib_t:dir { add_name create remove_name rmdir write }; allow httpd_t gitosis_var_lib_t:file { create link rename unlink write }; +allow httpd_t var_t:file { getattr open read };