From 0736fcb4f71ae670e2c7a325fdffd0163caeb4ea Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Mon, 31 Jul 2017 19:44:29 +0000
Subject: [PATCH] Tell staging koji to disallow building from forks.

---
 roles/koji_builder/templates/kojid.conf | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/roles/koji_builder/templates/kojid.conf b/roles/koji_builder/templates/kojid.conf
index ce9861ae36..90fb1edf07 100644
--- a/roles/koji_builder/templates/kojid.conf
+++ b/roles/koji_builder/templates/kojid.conf
@@ -61,6 +61,10 @@ pkgurl=http://kojipkgs.stg.fedoraproject.org/packages
 {% if env == 'staging' %}
 ; A whitespace-separated list of hostname:repository pairs that kojid is authorized to checkout from (no quotes)
 allowed_scms=
+    !src.stg.fedoraproject.org:/pagure/fork/*
+    !src.stg.fedoraproject.org:/pagure/forks/*
+    !pkgs.stg.fedoraproject.org:/pagure/fork/*
+    !pkgs.stg.fedoraproject.org:/pagure/forks/*
     pkgs.stg.fedoraproject.org:/docker/*:false
     pkgs.stg.fedoraproject.org:/rpms/*:false:fedpkg,sources
     pkgs.stg.fedoraproject.org:/*:false:fedpkg,sources