mirror of
https://github.com/gitbucket/gitbucket.git
synced 2025-10-26 08:06:15 +01:00
22 lines
510 B
Plaintext
22 lines
510 B
Plaintext
module gitbucket 1.0;
|
|
|
|
require {
|
|
type smtp_port_t;
|
|
type tomcat_t;
|
|
type tomcat_var_lib_t;
|
|
type unreserved_port_t;
|
|
|
|
class file { execute };
|
|
class tcp_socket { name_bind };
|
|
class tcp_socket { name_connect };
|
|
}
|
|
|
|
# allow tomcat to send emails
|
|
allow tomcat_t smtp_port_t:tcp_socket { name_connect };
|
|
|
|
# allow file executes, required during repo creation
|
|
allow tomcat_t tomcat_var_lib_t:file { execute };
|
|
|
|
# allow tomcat to serve repositories via SSH
|
|
allow tomcat_t unreserved_port_t:tcp_socket { name_bind };
|