git/usr.share.git-web.gitweb.cgi

# Last Modified: Fri Apr 14 14:11:09 2019
#include <tunables/global>

/usr/share/gitweb/gitweb.cgi {
  #include <abstractions/base>
  #include <abstractions/bash>
  #include <abstractions/nameservice>
  #include <abstractions/perl>

  /{usr/,}bin/bash rix,
  /{usr/,}bin/tar rix,
  /usr/bin/gzip rix,
  /usr/bin/bzip2 rix,
  /usr/bin/zip rix,
  /dev/tty rw,
  /etc/gitweb.conf r,
  /etc/mime.types r,
  /proc/meminfo r,
  /proc/sys/kernel/ngroups_max r,
  /srv/git/ r,
  /srv/git/** r,
  /usr/bin/perl ix,
  /usr/lib/git/git rix,
  /usr/bin/git-receive-pack rix,
  /usr/share/gitweb/* r,
  /usr/share/gitweb/static/* r,
}