git and selinux

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06/11/2012 07:08 PM, Pete Stieber wrote:
> I'm trying to setup a git server on a Fedora 17 box.  I created  user name
> git and setup bare Git repos under /home/git/repos.  When I clone these
> repos from another machine using
> 
> $ git clone git at server_name/repos/RepoName.git RepoName
> 
> selinux wants the type of /home/git to be user_home_t.
> 
> When I try to use http for read-only, public access using
> 
> $ git clone http://server_name/git/RepoName.git RepoName
> 
> I'm not sure what to do to use both.
> 
> A few versions of Fedora ago, I would get sealert entries in some log 
> (/var/log/messages ?) that would give me hints on how to fix this type of 
> problem.  Is that still available?
> 
> Pete
> 


Well, we have default labeling for git stores in /var/lib/git

matchpathcon /var/lib/git
/var/lib/git	system_u:object_r:git_sys_content_t:s0

# semanage fcontext -a -t git_sys_content_t "/home/git(/.*)?"
# restorecon -R -v /home/git/

I think will solve your problem.  Or move you content to /var/lib/git.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/XMtEACgkQrlYvE4MpobNL8wCgop1K7g9CnJiAnOcBtJ/r1j/t
BpYAn0cSSbVBx11ES6D62PK/455QcCBn
=CFwS
-----END PGP SIGNATURE-----