From 59c30f2015c45ed752b8eba7299b300844bec499 Mon Sep 17 00:00:00 2001
From: Stonewall Jackson <stonewall@sacredheartsc.com>
Date: Thu, 27 Apr 2023 20:18:17 -0400
Subject: gitlite: fix selinux noise

---
 roles/gitolite/vars/main.yml | 1 +
 1 file changed, 1 insertion(+)

(limited to 'roles/gitolite')

diff --git a/roles/gitolite/vars/main.yml b/roles/gitolite/vars/main.yml
index 4c3058a..6d2e38a 100644
--- a/roles/gitolite/vars/main.yml
+++ b/roles/gitolite/vars/main.yml
@@ -28,6 +28,7 @@ gitolite_selinux_policy_te: |
   #============= sshd_t ==============
   allow sshd_t gssproxy_t:unix_stream_socket connectto;
   allow sshd_t gssproxy_var_lib_t:sock_file write;
+  allow sshd_t httpd_unconfined_script_t:key { read view };
 
   #============= httpd_t ==============
   allow httpd_t httpd_unconfined_script_t:key { read view };
-- 
cgit