configpolicy

dustin

configpolicy

Fork 0

Commit Graph

Author	SHA1	Message	Date
Dustin	f9e8c78e5a	roles/websites: Set authorized_keys file perms Because the various "webapp.*" users' home directories are under `/srv/www`, the default SELinux context type is `httpd_sys_content_t`. The SSH daemon is not allowed to read files with this label, so it cannot load the contents of these users' `authorized_keys` files. To address this, we have to explicitly set the SELinux type to `ssh_home_t`.	2020-12-30 20:59:27 -06:00
Dustin	ae5d8bee56	websites: Add role for ebonfire.com The websites/ebonfire.com role prepares a machine to host http://ebonfire.com/. The website itself is published via rsync by Jenkins.	2018-07-29 09:33:31 -05:00

Author

SHA1

Message

Date

Dustin

f9e8c78e5a

roles/websites: Set authorized_keys file perms

Because the various "webapp.*" users' home directories are under
`/srv/www`, the default SELinux context type is `httpd_sys_content_t`.
The SSH daemon is not allowed to read files with this label, so it
cannot load the contents of these users' `authorized_keys` files.  To
address this, we have to explicitly set the SELinux type to
`ssh_home_t`.

2020-12-30 20:59:27 -06:00

Dustin

ae5d8bee56

websites: Add role for ebonfire.com

The *websites/ebonfire.com* role prepares a machine to host
http://ebonfire.com/. The website itself is published via rsync by
Jenkins.

2018-07-29 09:33:31 -05:00

2 Commits (3be9c40f2b80c97eb7f1537cd4bd02b33d430af8)