41 lines
1.1 KiB
Text
41 lines
1.1 KiB
Text
#include <tunables/global>
|
|
|
|
/var/xyzzy/bin/gitea* flags=(complain) {
|
|
#include <abstractions/base>
|
|
#include <abstractions/nameservice>
|
|
#include <abstractions/user-tmp>
|
|
|
|
/dev/tty rw,
|
|
/etc/gitconfig r,
|
|
/etc/machine-id r,
|
|
/etc/mime.types r,
|
|
/proc/sys/net/core/somaxconn r,
|
|
/proc/version r,
|
|
/sys/devices/system/cpu/online r,
|
|
/sys/kernel/mm/transparent_hugepage/hpage_pmd_size r,
|
|
/usr/bin/basename mrix,
|
|
/usr/bin/bash mrix,
|
|
/usr/bin/cat mrix,
|
|
/usr/bin/dash mrix,
|
|
/usr/bin/env rix,
|
|
/usr/bin/git mrix,
|
|
/usr/bin/gzip mrix,
|
|
/usr/lib/git-core/git mrix,
|
|
/usr/share/git-core/templates r,
|
|
/usr/share/mime/globs2 r,
|
|
|
|
/var/xyzzy/backup/* rw,
|
|
/var/xyzzy/bin/gitea* mrix,
|
|
/var/xyzzy/etc/gitea/app.ini r,
|
|
/var/xyzzy/gitea/** r,
|
|
/var/xyzzy/gitea/data/gitea-repositories/*/*.git/hooks/* mrix,
|
|
/var/xyzzy/gitea/data/gitea-repositories/*/*.git/hooks/*.d/* mrix,
|
|
|
|
owner /proc/*/cpuset r,
|
|
owner /var/xyzzy/git/.gitconfig rw,
|
|
owner /var/xyzzy/git/.gitconfig.lock rw,
|
|
owner /var/xyzzy/git/.ssh/* rw,
|
|
owner /var/xyzzy/gitea/data/** rwkl,
|
|
owner /var/xyzzy/gitea/log/* rw,
|
|
|
|
}
|