louis89

!/bin/bash

# Call this script with the name of the source policy file.
# The policy file is expected to have the extension .te

if [ $1 ]; then
        m4 "$1.te" > "$1.m4.te"
        checkmodule -M -m "$1.m4.te" -o "$1.mod"
        semodule_package -o "$1.pp" -m "$1.mod"
else

louis89

sudo semanage fcontext -t mysqld_db_t -s system_u -a "/home/mysql(/.*)?"

louis89

import groovy.json.JsonSlurper

def build = Thread.currentThread().executable
def workspace = new File(build.workspace.getRemote())

def repositoryMatcher = "git config --get remote.origin.url".execute(null, workspace).text =~ /.+?(bitbucket.org|github.com)(?::|\/)(.*?).git$/
def pullIdMatcher = "git log ${build.getEnvironment()["GIT_COMMIT"]} --merges --oneline -n 1".execute(null, workspace).text =~ /pull request #(\d+)/

if (!pullIdMatcher) {
	println "Could not find pull request for commit '${build.getEnvironment()["GIT_COMMIT"]}'."

louis89

# @author Louis DaPrato <[email protected]>

module httpd_read_mysql_lnk_file 1.0;

require {
    type mysqld_db_t;
    type httpd_t;
    class lnk_file read;
}

louis89

# @author Louis DaPrato <[email protected]>

module mysql_home_root_t 1.0;

require {
    type mysqld_safe_t;
    type mysqld_t;
    type home_root_t;
    class dir { search open read getattr };
}