Page MenuHomePhabricator

SELinux policies for phabricator, arcanist and libphutil
AbandonedPublic

Authored by vinzent on Dec 23 2014, 9:39 AM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Dec 9, 8:01 AM
Unknown Object (File)
Sun, Dec 1, 5:40 PM
Unknown Object (File)
Wed, Nov 27, 4:50 AM
Unknown Object (File)
Sat, Nov 23, 2:32 AM
Unknown Object (File)
Thu, Nov 21, 4:37 PM
Unknown Object (File)
Mon, Nov 18, 6:33 PM
Unknown Object (File)
Sun, Nov 17, 10:02 PM
Unknown Object (File)
Sun, Nov 17, 9:22 PM
Subscribers

Details

Reviewers
None
Group Reviewers
Blessed Reviewers
Summary

policy source files to run phabricator with selinux enabled.

Some sites have stric selinux enforcing policies for their servers and therefore require a selinux policy to run phabricator.

Test Plan

in use on a RHEL6 system

Diff Detail

Repository
rP Phabricator
Branch
selinux
Lint
Lint Errors
SeverityLocationCodeMessage
Errorresources/selinux/arcanist.fc:1TXT2Tab Literal
Errorresources/selinux/arcanist.if:3TXT2Tab Literal
Errorresources/selinux/libphutil.fc:1TXT2Tab Literal
Errorresources/selinux/libphutil.if:3TXT2Tab Literal
Errorresources/selinux/phabricator.fc:1TXT2Tab Literal
Errorresources/selinux/phabricator.if:3TXT2Tab Literal
Warningresources/selinux/README:26TXT3Line Too Long
Warningresources/selinux/arcanist.fc:2TXT3Line Too Long
Warningresources/selinux/phabricator.fc:1TXT3Line Too Long
Warningresources/selinux/phabricator.fc:2TXT3Line Too Long
Warningresources/selinux/phabricator.fc:3TXT3Line Too Long
Warningresources/selinux/phabricator.fc:4TXT3Line Too Long
Warningresources/selinux/phabricator.fc:5TXT3Line Too Long
Warningresources/selinux/phabricator.fc:6TXT3Line Too Long
Auto-Fixresources/selinux/arcanist.if:35TXT9Trailing Whitespace at EOF
Auto-Fixresources/selinux/libphutil.if:17TXT9Trailing Whitespace at EOF
Auto-Fixresources/selinux/libphutil.te:7TXT9Trailing Whitespace at EOF
Auto-Fixresources/selinux/phabricator.if:35TXT9Trailing Whitespace at EOF
Auto-Fixresources/selinux/phabricator.te:36TXT6Trailing Whitespace
Auto-Fixresources/selinux/phabricator.te:37TXT6Trailing Whitespace
Auto-Fixresources/selinux/phabricator.te:38TXT6Trailing Whitespace
Auto-Fixresources/selinux/phabricator.te:39TXT6Trailing Whitespace
Auto-Fixresources/selinux/phabricator.te:54TXT6Trailing Whitespace
Auto-Fixresources/selinux/phabricator.te:63TXT9Trailing Whitespace at EOF
Unit
No Test Coverage
Build Status
Buildable 3319
Build 3326: [Placeholder Plan] Wait for 30 Seconds

Event Timeline

vinzent retitled this revision from to SELinux policies for phabricator, arcanist and libphutil.
vinzent updated this object.
vinzent edited the test plan for this revision. (Show Details)

We aren't interested in including these in the upstream: we aren't experienced with SELinux, don't test on it, and don't want to maintain them (and they're very likely to change over time).

You could publish these somewhere and add them to the community resources page: https://secure.phabricator.com/w/community_resources/