Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

koji / hub: set MissingPolicyOk False

Browse source 
This will mean that anything we don't have a policy for will be denied
instead of allowed. We want this (safer) default.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2020-07-23 09:42:25 -07:00
parent daa2d739b8
commit 103210fb36
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
roles/koji_hub/templates/hub.conf.j2
View file

@ -57,6 +57,12 @@ DisableNotifications = True
## subclasses of koji.GenericError). ## subclasses of koji.GenericError).
# KojiDebug = On # KojiDebug = On
## If MissingPolicyOk is on, and given policy is not set up,
## policy test will pass as ok. If 'deny' result is desired, set it
## to off
# MissingPolicyOk = True
MissingPolicyOk = False
## Determines how much detail about exceptions is reported to the client (via faults) ## Determines how much detail about exceptions is reported to the client (via faults)
## Meaningful values: ## Meaningful values:
## normal - a basic traceback (format_exception) ## normal - a basic traceback (format_exception)