Attachment 310522 Details for Bug 452384 – Modification to SELinux policy, applies to selinux-policy-3.4.2-8.fc10

Modification to SELinux policy, applies to selinux-policy-3.4.2-8.fc10

selinux-policy-3.4.2-cvsweb.patch (text/plain), 2.47 KB, created by Lubomir Rintel on 2008-06-28 22:40:13 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Lubomir Rintel

Created: 2008-06-28 22:40:13 UTC

Size: 2.47 KB

patch

obsolete

>SELinux policy for cvsweb-3.0.6-4.fc10.
>
>Please note that the directory layout was nonconformant in versions
>up to cvsweb-3.0.6-3.fc6, so this won't work there.
>
>Lubomir Rintel <lkundrak@v3.sk>
>
>diff -urp serefpolicy-3.4.2.orig/policy/modules/services/apache.fc serefpolicy-3.4.2/policy/modules/services/apache.fc
>--- serefpolicy-3.4.2.orig/policy/modules/services/apache.fc	2008-06-28 23:58:13.000000000 +0200
>+++ serefpolicy-3.4.2/policy/modules/services/apache.fc	2008-06-29 00:08:17.000000000 +0200
>@@ -88,3 +88,6 @@ ifdef(`distro_debian', `
> /var/www/html/[^/]*/cgi-bin(/.*)?	gen_context(system_u:object_r:httpd_sys_script_exec_t,s0)
> 
> /etc/rc\.d/init\.d/httpd	--	gen_context(system_u:object_r:httpd_script_exec_t,s0)
>+
>+#CVSWeb file context
>+/usr/share/cvsweb/cvsweb.cgi	--	gen_context(system_u:object_r:httpd_cvsweb_script_exec_t,s0)
>diff -urp serefpolicy-3.4.2.orig/policy/modules/services/apache.if serefpolicy-3.4.2/policy/modules/services/apache.if
>--- serefpolicy-3.4.2.orig/policy/modules/services/apache.if	2008-06-28 23:58:13.000000000 +0200
>+++ serefpolicy-3.4.2/policy/modules/services/apache.if	2008-06-29 00:07:21.000000000 +0200
>@@ -1212,3 +1212,22 @@ ifdef(`TODO', `
> 	allow httpd_setsebool_t httpd_bool_t:file rw_file_perms;
> ')
> ')
>+
>+########################################
>+## <summary>
>+##	Execute a domain transition to run httpd_cvsweb_script.
>+## </summary>
>+## <param name="domain">
>+## <summary>
>+##	Domain allowed to transition.
>+## </summary>
>+## </param>
>+#
>+interface(`httpd_cvsweb_script_domtrans',`
>+	gen_require(`
>+		type httpd_cvsweb_script_t;
>+                type httpd_cvsweb_script_exec_t;
>+	')
>+
>+	domtrans_pattern($1,httpd_cvsweb_script_exec_t,httpd_cvsweb_script_t)
>+')
>diff -urp serefpolicy-3.4.2.orig/policy/modules/services/apache.te serefpolicy-3.4.2/policy/modules/services/apache.te
>--- serefpolicy-3.4.2.orig/policy/modules/services/apache.te	2008-06-28 23:58:13.000000000 +0200
>+++ serefpolicy-3.4.2/policy/modules/services/apache.te	2008-06-29 00:10:55.000000000 +0200
>@@ -934,3 +934,13 @@ optional_policy(`
> optional_policy(`
> 	postgresql_stream_connect(httpd_bugzilla_script_t)
> ')
>+
>+########################################
>+# CVSWeb policy
>+
>+apache_content_template(cvsweb)
>+
>+allow httpd_cvsweb_script_t cvs_data_t:dir read;
>+allow httpd_cvsweb_script_t cvs_data_t:file { read getattr };
>+allow httpd_cvsweb_script_t tmp_t:dir { read write rmdir setattr remove_name create add_name };
>+allow httpd_cvsweb_script_t tmp_t:file { write getattr read create unlink append };

Actions: View

Attachments on bug 452384: 310522 | 310619