configpolicy

dustin

configpolicy

Fork 0

Commit Graph

Author	SHA1	Message	Date
Dustin	f9e8c78e5a	roles/websites: Set authorized_keys file perms Because the various "webapp.*" users' home directories are under `/srv/www`, the default SELinux context type is `httpd_sys_content_t`. The SSH daemon is not allowed to read files with this label, so it cannot load the contents of these users' `authorized_keys` files. To address this, we have to explicitly set the SELinux type to `ssh_home_t`.	2020-12-30 20:59:27 -06:00
Dustin	3d46e6b411	websites: Add role for dustin.hatch.name The websites/dustin.hatch.name role configures a server to host http://dustin.hatch.name/. The role only applies basic configuration; the actual website application is published by Jenkins.	2018-07-29 09:32:19 -05:00

Author

SHA1

Message

Date

Dustin

f9e8c78e5a

roles/websites: Set authorized_keys file perms

Because the various "webapp.*" users' home directories are under
`/srv/www`, the default SELinux context type is `httpd_sys_content_t`.
The SSH daemon is not allowed to read files with this label, so it
cannot load the contents of these users' `authorized_keys` files.  To
address this, we have to explicitly set the SELinux type to
`ssh_home_t`.

2020-12-30 20:59:27 -06:00

Dustin

3d46e6b411

websites: Add role for dustin.hatch.name

The *websites/dustin.hatch.name* role configures a server to host
http://dustin.hatch.name/. The role only applies basic configuration;
the actual website application is published by Jenkins.

2018-07-29 09:32:19 -05:00

2 Commits (d39b2bcb19784f8147c6aee179670663d36f9839)