change koji hub perms so that autosign can move builds in secure-boot channel as needed to sign them

This commit is contained in:
Kevin Fenzi 2016-12-14 22:21:55 +00:00
parent ef6d4e72e4
commit 4e1bf65651

View file

@ -107,7 +107,7 @@ Plugins = fedmsg-koji-plugin runroot_hub hub_containerbuild
tag =
has_perm autosign && fromtag *-signing-pending && tag *-updates-testing-pending && package kernel shim grub2 fedora-release fedora-repos pesign :: allow
has_perm autosign && fromtag *-pending && package kernel shim grub2 fedora-release fedora-repos pesign :: allow
has_perm secure-boot && package kernel shim grub2 fedora-release fedora-repos pesign :: allow
package kernel shim grub2 fedora-release fedora-repos pesign :: deny
all :: allow