I was browsing git policy and noticed this
optional_policy(` apache_content_template(git) - git_read_session_content_files(httpd_git_script_t) + git_read_all_content_files(httpd_git_script_t) files_dontaudit_getattr_tmp_dirs(httpd_git_script_t) ')
Allow httpd git scripts to read git system and git user content. That way cgit or gitweb can display both: all system repositories in /var/lib/git as well as all user repositories in /home/*/public_git.
selinux@lists.fedoraproject.org