Remove module for gitosis.

diff --git a/policy/modules/apps/gitosis.fc b/policy/modules/apps/gitosis.fc
deleted file mode 100644 (file)
index 7e90e45..0000000
--- a/policy/modules/apps/gitosis.fc
+++ /dev/null
@@ -1,5 +0,0 @@
-/usr/bin/gitosis-serve                 --      gen_context(system_u:object_r:gitosis_exec_t,s0)
-/usr/bin/gl-auth-command               --      gen_context(system_u:object_r:gitosis_exec_t,s0)
-
-/var/lib/gitosis(/.*)?                         gen_context(system_u:object_r:gitosis_var_lib_t,s0)
-/var/lib/gitolite(/.*)?                                gen_context(system_u:object_r:gitosis_var_lib_t,s0)

diff --git a/policy/modules/apps/gitosis.if b/policy/modules/apps/gitosis.if
deleted file mode 100644 (file)
index e898b91..0000000
--- a/policy/modules/apps/gitosis.if
+++ /dev/null
@@ -1,86 +0,0 @@
-## <summary>Tools for managing and hosting git repositories.</summary>
-
-#######################################
-## <summary>
-##     Execute a domain transition to run gitosis.
-## </summary>
-## <param name="domain">
-## <summary>
-##     Domain allowed to transition.
-## </summary>
-## </param>
-#
-interface(`gitosis_domtrans',`
-       gen_require(`
-               type gitosis_t, gitosis_exec_t;
-       ')
-
-       domtrans_pattern($1, gitosis_exec_t, gitosis_t)
-')
-
-#######################################
-## <summary>
-##     Execute gitosis-serve in the gitosis domain, and
-##     allow the specified role the gitosis domain.
-## </summary>
-## <param name="domain">
-##     <summary>
-##     Domain allowed access
-##     </summary>
-## </param>
-## <param name="role">
-##     <summary>
-##     Role allowed access.
-##     </summary>
-## </param>
-#
-interface(`gitosis_run',`
-       gen_require(`
-               type gitosis_t;
-       ')
-
-       gitosis_domtrans($1)
-       role $2 types gitosis_t;
-')
-
-#######################################
-## <summary>
-##     Allow the specified domain to read
-##     gitosis lib files.
-## </summary>
-## <param name="domain">
-##     <summary>
-##     Domain allowed access.
-##     </summary>
-## </param>
-#
-interface(`gitosis_read_lib_files',`
-       gen_require(`
-               type gitosis_var_lib_t;
-       ')
-
-       files_search_var_lib($1)
-       read_files_pattern($1, gitosis_var_lib_t, gitosis_var_lib_t)
-       read_lnk_files_pattern($1, gitosis_var_lib_t, gitosis_var_lib_t)
-       list_dirs_pattern($1, gitosis_var_lib_t, gitosis_var_lib_t)
-')
-
-######################################
-## <summary>
-##     Allow the specified domain to manage
-##     gitosis lib files.
-## </summary>
-## <param name="domain">
-##     <summary>
-##     Domain allowed access.
-##     </summary>
-## </param>
-#
-interface(`gitosis_manage_lib_files',`
-       gen_require(`
-               type gitosis_var_lib_t;
-       ')
-
-       files_search_var_lib($1)
-       manage_files_pattern($1, gitosis_var_lib_t, gitosis_var_lib_t)
-')

diff --git a/policy/modules/apps/gitosis.te b/policy/modules/apps/gitosis.te
deleted file mode 100644 (file)
index 4a2e63b..0000000
--- a/policy/modules/apps/gitosis.te
+++ /dev/null
@@ -1,41 +0,0 @@
-policy_module(gitosis, 1.2.0)
-
-########################################
-#
-# Declarations
-#
-
-type gitosis_t;
-type gitosis_exec_t;
-application_domain(gitosis_t, gitosis_exec_t)
-role system_r types gitosis_t;
-
-type gitosis_var_lib_t;
-files_type(gitosis_var_lib_t)
-
-########################################
-#
-# gitosis local policy
-#
-
-allow gitosis_t self:fifo_file rw_fifo_file_perms;
-
-exec_files_pattern(gitosis_t, gitosis_var_lib_t, gitosis_var_lib_t)
-manage_files_pattern(gitosis_t, gitosis_var_lib_t, gitosis_var_lib_t)
-manage_lnk_files_pattern(gitosis_t, gitosis_var_lib_t, gitosis_var_lib_t)
-manage_dirs_pattern(gitosis_t, gitosis_var_lib_t, gitosis_var_lib_t)
-
-kernel_read_system_state(gitosis_t)
-
-corecmd_exec_bin(gitosis_t)
-corecmd_exec_shell(gitosis_t)
-
-dev_read_urand(gitosis_t)
-
-files_read_etc_files(gitosis_t)
-files_read_usr_files(gitosis_t)
-files_search_var_lib(gitosis_t)
-
-miscfiles_read_localization(gitosis_t)
-
-sysnet_read_config(gitosis_t)

diff --git a/policy/modules/services/apache.te b/policy/modules/services/apache.te
index 6b7400b03a433782a8dd953c474d1f1a31545cf4..e589d33ca43842c17273a1312dd842dcaf813d14 100644 (file)
--- a/policy/modules/services/apache.te
+++ b/policy/modules/services/apache.te
@@ -776,11 +776,6 @@ optional_policy(`
        ')
 ')
 
        ')
 ')
 

-optional_policy(`
-       git_read_generic_system_content_files(httpd_t)
-       gitosis_read_lib_files(httpd_t)
-')
-

 optional_policy(`
        tunable_policy(`httpd_enable_cgi && httpd_use_gpg',`
                gpg_domtrans_web(httpd_t)
 optional_policy(`
        tunable_policy(`httpd_enable_cgi && httpd_use_gpg',`
                gpg_domtrans_web(httpd_t)

diff --git a/policy/modules/services/ssh.te b/policy/modules/services/ssh.te
index 12ad27c5a99599c1ad7f6344190dd0ff6ab29704..aadaa2cb0b2f164ef873a1f80fae6aed00dfe53c 100644 (file)
--- a/policy/modules/services/ssh.te
+++ b/policy/modules/services/ssh.te
@@ -302,10 +302,6 @@ optional_policy(`
        ftp_dyntrans_anon_sftpd(sshd_t)
 ')
 
        ftp_dyntrans_anon_sftpd(sshd_t)
 ')
 

-optional_policy(`
-       gitosis_manage_lib_files(sshd_t)
-')
-

 optional_policy(`
        inetd_tcp_service_domain(sshd_t, sshd_exec_t)
 ')
 optional_policy(`
        inetd_tcp_service_domain(sshd_t, sshd_exec_t)
 ')