Make ~git/.ssh/authorized_keys valid for SELinux

Jacob Vosmaer
1 parent 90c7c03e
Showing 1 changed file with 6 additions and 0 deletions Show diff stats
files/gitlab-cookbooks/gitlab/recipes/gitlab-shell.rb
@@ -38,6 +38,12 @@ directory ssh_dir do
   recursive true
 end
+# If SELinux is enabled, make sure that OpenSSH thinks the .ssh directory of the
+# git_user is valid.
+execute "chcon -t user_home_t #{ssh_dir}" do
+  only_if "id -Z"
+end
+
 directory log_directory do
   owner git_user
   recursive true
	@@ -38,6 +38,12 @@ directory ssh_dir do		@@ -38,6 +38,12 @@ directory ssh_dir do
38	recursive true	38	recursive true
39	end	39	end
40		40
		41	+# If SELinux is enabled, make sure that OpenSSH thinks the .ssh directory of the
		42	+# git_user is valid.
		43	+execute "chcon -t user_home_t #{ssh_dir}" do
		44	+ only_if "id -Z"
		45	+end
		46	+
41	directory log_directory do	47	directory log_directory do
42	owner git_user	48	owner git_user
43	recursive true	49	recursive true