Diffstat (limited to 'man/man8/git_selinux.8')
1 files changed, 10 insertions, 10 deletions
diff --git a/man/man8/git_selinux.8 b/man/man8/git_selinux.8
index c2142e04..ed8bb76f 100644
@@ -13,23 +13,23 @@ git_selinux \- Security Enhanced Linux Policy for the Git daemon.
Security-Enhanced Linux secures the Git server via flexible mandatory access
-SELinux requires files to have an extended attribute to define the file type.
-Policy governs the access daemons have to these files.
+SELinux requires files to have an extended attribute to define the file type.
+Policy governs the access daemons have to these files.
SELinux Git policy is very flexible allowing users to setup their web services in as secure a method as possible.
The following file contexts types are by default defined for Git:
- Set files with git_system_content_t if you want the Git system daemon to read the file, and if you want the file to be modifiable and executable by all "Git shell" users.
- Set files with git_session_content_t if you want the Git session and system daemon to read the file, and if you want the file to be modifiable and executable by all users. Note that "Git shell" users may not interact with this type.
SELinux policy is customizable based on least access required. Git policy is extremely flexible and has several booleans that allow you to manipulate the policy and run Git with the tightest access possible.
-Allow the Git system daemon to search user home directories so that it can find git session content. This is useful if you want the Git system daemon to host users personal repositories.
+Allow the Git system daemon to search user home directories so that it can find git session content. This is useful if you want the Git system daemon to host users personal repositories.
sudo setsebool -P git_system_enable_homedirs 1
@@ -90,7 +90,7 @@ sudo restorecon -R -v /srv/git/project1
To create a "Git shell" domain that can interact with this repository create a file named project1user.te in the same directory as where the source policy for the Git systemm content type is and add the following:
gen_user(project1user_u, user, project1user_r, s0, s0)
@@ -103,7 +103,7 @@ sudo useradd -Z project1user_u jane
system-config-selinux is a GUI tool available to customize SELinux policy settings.
This manual page was written by Dominick Grift <email@example.com>.
.SH "SEE ALSO"
selinux(8), git(8), chcon(1), semodule(8), setsebool(8)