git policy

Dominick Grift domg472 at gmail.com
Sat Apr 24 15:31:17 UTC 2010


I was browsing git policy and noticed this

 optional_policy(`
 	apache_content_template(git)
-	git_read_session_content_files(httpd_git_script_t)
+	git_read_all_content_files(httpd_git_script_t)
 	files_dontaudit_getattr_tmp_dirs(httpd_git_script_t)
 ')

Allow httpd git scripts to read git system and git user content. That way cgit or gitweb can display both: all system repositories in /var/lib/git as well as all user repositories in /home/*/public_git. 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/selinux/attachments/20100424/262af908/attachment.bin 


More information about the selinux mailing list