From 7a62af798d789c26b0e4195eff9145770a5a0744 Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Wed, 2 Aug 2017 00:13:42 +0000
Subject: [PATCH] Deny access to pagure-on-dist-git fork repos.

---
 roles/koji_builder/templates/kojid.conf | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/roles/koji_builder/templates/kojid.conf b/roles/koji_builder/templates/kojid.conf
index ece84875ba..b7dd0376f6 100644
--- a/roles/koji_builder/templates/kojid.conf
+++ b/roles/koji_builder/templates/kojid.conf
@@ -78,6 +78,10 @@ allowed_scms=
 {% else %}
 ; A whitespace-separated list of hostname:repository pairs that kojid is authorized to checkout from (no quotes)
 allowed_scms=
+    !src.fedoraproject.org:/pagure/fork/*
+    !src.fedoraproject.org:/pagure/forks/*
+    !pkgs.fedoraproject.org:/pagure/fork/*
+    !pkgs.fedoraproject.org:/pagure/forks/*
     pkgs.fedoraproject.org:/*:false:fedpkg,sources
     pagure.io:/fedora-kickstarts.git:false
     src.fedoraproject.org:/*:false:fedpkg,sources