From 4cc1a5deb5249fd6a4c66dca9769fde3313b27ab Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Tue, 28 Nov 2017 18:47:35 +0000 Subject: [PATCH] add policy to allow mbs to untag module builds in the secure-boot channel --- roles/koji_hub/templates/hub.conf.j2 | 1 + 1 file changed, 1 insertion(+) diff --git a/roles/koji_hub/templates/hub.conf.j2 b/roles/koji_hub/templates/hub.conf.j2 index 29da36f6b1..a58c6d4b61 100644 --- a/roles/koji_hub/templates/hub.conf.j2 +++ b/roles/koji_hub/templates/hub.conf.j2 @@ -111,6 +111,7 @@ Plugins = fedmsg-koji-plugin runroot_hub hub_containerbuild tag = user mbs/mbs.fedoraproject.org && tag module-* && package kernel shim grub2 fedora-release fedora-repos pesign :: allow + user mbs/mbs.fedoraproject.org && fromtag module-* && package kernel shim grub2 fedora-release fedora-repos pesign :: allow user bodhi && tag *-override && package kernel shim grub2 fedora-release fedora-repos pesign :: allow has_perm autosign && fromtag *-pending && package kernel shim grub2 fedora-release fedora-repos pesign :: allow has_perm secure-boot && package kernel shim grub2 fedora-release fedora-repos pesign :: allow