Accepting request 1119646 from home:michals:branches:devel:tools:scm

- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).

- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier

OBS-URL: https://build.opensuse.org/request/show/1119646
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm/git?expand=0&rev=624

git.changes

@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Mon Oct 23 12:42:40 UTC 2023 - Michal Suchanek <msuchanek@suse.com>
+
+- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).
+
+-------------------------------------------------------------------
+Mon Oct 23 12:34:06 UTC 2023 - Christian Boltz <suse-beta@cboltz.de>
+
+- gitweb.cgi AppArmor profile
+  - make the profile a named profile
+  - add local/ include to make custom additions easier
+
 -------------------------------------------------------------------
 Fri Sep 22 15:13:11 UTC 2023 - Michal Suchanek <msuchanek@suse.com>
 

usr.share.git-web.gitweb.cgi

@@ -1,13 +1,13 @@
-# Last Modified: Fri Apr 14 14:11:09 2019
 #include <tunables/global>
 
-/usr/share/gitweb/gitweb.cgi {
+profile gitweb.cgi /usr/share/gitweb/gitweb.cgi {
   #include <abstractions/base>
   #include <abstractions/bash>
   #include <abstractions/nameservice>
   #include <abstractions/perl>
   #include <abstractions/private-files-strict>
 
+  /etc/gitconfig r,
   /{usr/,}bin/bash rix,
   /{usr/,}bin/tar rix,
   /usr/bin/gzip rix,
@@ -29,4 +29,7 @@
   owner /**/ r,
   owner /**/.git/** r,
   owner @{HOME}/.gitconfig r,
+
+  # Site-specific additions and overrides. See local/README for details.
+  include if exists <local/usr.share.git-web.gitweb.cgi>
 }