commit:     14f5549af3808b0830f511ab951e534e8ac93a94
Author:     Kenton Groombridge <me <AT> concord <DOT> sh>
AuthorDate: Mon Nov  8 16:59:03 2021 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Thu Nov 11 21:26:50 2021 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=14f5549a

git: fix typo in git hook exec access

Signed-off-by: Kenton Groombridge <me <AT> concord.sh>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>

 policy/modules/services/git.if | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/policy/modules/services/git.if b/policy/modules/services/git.if
index 0e72e667..3684aa00 100644
--- a/policy/modules/services/git.if
+++ b/policy/modules/services/git.if
@@ -104,7 +104,7 @@ template(`git_client_role_template',`
        auth_use_nsswitch($1_git_t)
 
        # allow userdomains to exec git hooks
-       exec_files_pattern($3, git_home_t, git_home_t)
+       exec_files_pattern($3, git_home_hook_t, git_home_hook_t)
        # transition back to the user domain when executing git hooks
        domtrans_pattern($1_git_t, git_home_t, $3)
 

Reply via email to