# Last Modified: Fri Dec 19 11:03:49 2008

#include <tunables/global>

​

/usr/share/gitweb/gitweb.cgi {

  #include <abstractions/base>

  #include <abstractions/bash>

  #include <abstractions/nameservice>

  #include <abstractions/perl>

​

  /bin/bash rix,

  /dev/tty rw,

  /etc/gitweb.conf r,

  /etc/mime.types r,

  /proc/meminfo r,

  /proc/sys/kernel/ngroups_max r,

  /srv/git/ r,

  /srv/git/** r,

  /usr/bin/perl ix,

  /usr/lib/git/git rix,

  /usr/bin/git-receive-pack rix,

  /usr/share/gitweb/* r,

  /usr/share/gitweb/static/* r,

}

​