pulpcore.fc

# label for both nginx & apache
/etc/pulp/certs(/.*)?			gen_context(system_u:object_r:httpd_config_t,s0)

/etc/pulp/certs/database_fields.symmetric.key	gen_context(system_u:object_r:pulpcore_etc_t,s0)
/etc/pulp/certs/galaxy_signing_service.*	gen_context(system_u:object_r:pulpcore_etc_t,s0)
/etc/pulp/certs/token_private_key.pem		gen_context(system_u:object_r:pulpcore_etc_t,s0)
/etc/pulp/certs/token_public_key.pem		gen_context(system_u:object_r:pulpcore_etc_t,s0)
/etc/pulp/settings.py			gen_context(system_u:object_r:pulpcore_etc_t,s0)

/usr/bin/pulpcore-(api|content)	--	gen_context(system_u:object_r:pulpcore_server_exec_t,s0)
/usr/bin/pulpcore-worker	--	gen_context(system_u:object_r:pulpcore_exec_t,s0)

/usr/libexec/pulpcore/.*	--	gen_context(system_u:object_r:pulpcore_exec_t,s0)
/usr/libexec/pulpcore/gunicorn	--	gen_context(system_u:object_r:pulpcore_server_exec_t,s0)

/usr/local/lib/pulp/bin/gunicorn	--	gen_context(system_u:object_r:pulpcore_server_exec_t,s0)
/usr/local/lib/pulp/bin/pulpcore-worker	--	gen_context(system_u:object_r:pulpcore_exec_t,s0)
# Old tasking system.
/usr/local/lib/pulp/bin/rq		--	gen_context(system_u:object_r:pulpcore_exec_t,s0)

/var/lib/pulp(/.*)?			gen_context(system_u:object_r:pulpcore_var_lib_t,s0)
/var/lib/pulp/pulpcore_static(/.*)? 	gen_context(system_u:object_r:httpd_sys_content_t,s0)

# galaxy-importer
/var/lib/pulp/.ansible(/.*)?	gen_context(system_u:object_r:pulpcore_var_lib_t,s0)
/var/lib/pulp/.cache(/.*)?	gen_context(system_u:object_r:pulpcore_var_lib_t,s0)

/var/log/galaxy_api_access.log		gen_context(system_u:object_r:pulpcore_log_t,s0)

/var/run/pulpcore-api(/.*)?		gen_context(system_u:object_r:pulpcore_server_var_run_t,s0)
/var/run/pulpcore-content(/.*)?		gen_context(system_u:object_r:pulpcore_server_var_run_t,s0)
/var/run/pulpcore-(api|content)\.sock	gen_context(system_u:object_r:pulpcore_server_var_run_t,s0)
/var/run/pulpcore.*			gen_context(system_u:object_r:pulpcore_var_run_t,s0)