policy_module(git, 1.0) apache_content_template(git) permissive httpd_git_script_t; require { type httpd_git_script_t; type var_lib_t; class dir search; } #============= httpd_git_script_t ============== allow httpd_git_script_t var_lib_t:dir search; apache_search_sys_content(httpd_git_script_t) files_getattr_tmp_dirs(httpd_git_script_t)