Make ~git/.ssh/authorized_keys valid for SELinux

Jacob Vosmaer
1 parent 90c7c03e
Showing 1 changed file with 6 additions and 0 deletions Show diff stats
files/gitlab-cookbooks/gitlab/recipes/gitlab-shell.rb
@@ -38,6 +38,12 @@ directory ssh_dir do
   recursive true
 end
  
+# If SELinux is enabled, make sure that OpenSSH thinks the .ssh directory of the
+# git_user is valid.
+execute "chcon -t user_home_t #{ssh_dir}" do
+  only_if "id -Z"
+end
+
 directory log_directory do
   owner git_user
   recursive true
...	...	@@ -38,6 +38,12 @@ directory ssh_dir do
38	38	recursive true
39	39	end
40	40
	41	+# If SELinux is enabled, make sure that OpenSSH thinks the .ssh directory of the
	42	+# git_user is valid.
	43	+execute "chcon -t user_home_t #{ssh_dir}" do
	44	+ only_if "id -Z"
	45	+end
	46	+
41	47	directory log_directory do
42	48	owner git_user
43	49	recursive true
...	...