Added permission to access static files noosfero

Signed-off-by: Macartur Sousa <macartur.sc@gmail.com>

Added permission to access static files noosfero
Signed-off-by: Macartur Sousa <macartur.sc@gmail.com>
Macartur Sousa
1 parent 9449afc7
Showing 2 changed files with 24 additions and 0 deletions Show diff stats
cookbooks/noosfero/files/noosfero.te
cookbooks/noosfero/recipes/default.rb
@@ -0,0 +1,11 @@
+
+module noosfero 1.0;
+
+require {
+	type initrc_tmp_t;
+	type httpd_t;
+	class file open;
+}
+
+#============= httpd_t ==============
+allow httpd_t initrc_tmp_t:file open;
@@ -66,3 +66,16 @@ template &#39;/etc/nginx/conf.d/noosfero.conf&#39; do
   source 'nginx.conf.erb'
   notifies :restart, 'service[nginx]'
 end
+
+###############################################
+#  SELinux: permission to access static files noosfero
+################################################
+
+cookbook_file '/etc/selinux/local/noosfero.te' do
+  notifies :run, 'execute[selinux-noosfero]'
+end
+
+execute 'selinux-noosfero' do
+  command 'selinux-install-module /etc/selinux/local/noosfero.te'
+  action :nothing
+end
...	...	@@ -0,0 +1,11 @@
	1	+
	2	+module noosfero 1.0;
	3	+
	4	+require {
	5	+ type initrc_tmp_t;
	6	+ type httpd_t;
	7	+ class file open;
	8	+}
	9	+
	10	+#============= httpd_t ==============
	11	+allow httpd_t initrc_tmp_t:file open;
...	...
...	...	@@ -66,3 +66,16 @@ template '/etc/nginx/conf.d/noosfero.conf' do
66	66	source 'nginx.conf.erb'
67	67	notifies :restart, 'service[nginx]'
68	68	end
	69	+
	70	+###############################################
	71	+# SELinux: permission to access static files noosfero
	72	+################################################
	73	+
	74	+cookbook_file '/etc/selinux/local/noosfero.te' do
	75	+ notifies :run, 'execute[selinux-noosfero]'
	76	+end
	77	+
	78	+execute 'selinux-noosfero' do
	79	+ command 'selinux-install-module /etc/selinux/local/noosfero.te'
	80	+ action :nothing
	81	+end
...	...