I was browsing git policy and noticed this

optional_policy(`
apache_content_template(git)
- git_read_session_content_files(httpd_git_script_t)
+ git_read_all_content_files(httpd_git_script_t)
files_dontaudit_getattr_tmp_dirs(httpd_git_script_ t)
')

Allow httpd git scripts to read git system and git user content. That way cgit or gitweb can display both: all system repositories in /var/lib/git as well as all user repositories in /home/*/public_git.

--
selinux mailing list
selinux@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/selinux