Repository :
http://git.fedorahosted.org/cgit/copr.git
On branch : master
---------------------------------------------------------------
commit 060dbcd812e4bf285f73464b1fd321a037996cfa
Author: Miroslav Suchý <msuchy(a)redhat.com>
Date: Wed Sep 18 09:42:18 2013 +0200
generate selinux type for /var/lib/copr and /var/log/copr
---------------------------------------------------------------
selinux/copr.fc | 6 +++---
selinux/copr.te | 9 +++++++++
2 files changed, 12 insertions(+), 3 deletions(-)
diff --git a/selinux/copr.fc b/selinux/copr.fc
index fdff57a..d5ee0ad 100644
--- a/selinux/copr.fc
+++ b/selinux/copr.fc
@@ -1,3 +1,3 @@
-#
-# This file is currently intentionally left blank.
-#
+
+/var/lib/copr(/.*)? gen_context(system_u:object_r:copr_data_t,s0)
+/var/log/copr(/.*)? gen_context(system_u:object_r:copr_httpd_log_t,s0)
diff --git a/selinux/copr.te b/selinux/copr.te
index 4ffecc3..39f4cee 100644
--- a/selinux/copr.te
+++ b/selinux/copr.te
@@ -8,3 +8,12 @@ policy_module(copr,@@VERSION@@)
## </desc>
gen_tunable(copr_nfs_mountpoint,false)
+require {
+ type httpd_t;
+}
+
+type copr_data_t;
+files_type(copr_data_t);
+
+type copr_httpd_log_t;
+logging_log_file(copr_httpd_log_t);