From d7ffb3362199a6ade8b7c576e9f412662f34234d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Patrik=20Polakovi=C4=8D?= <patrik@alphamail.org>
Date: Mon, 19 May 2025 13:17:15 +0200
Subject: [PATCH] Add tag policy for OpenH264
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Patrik Polakovič <patrik@alphamail.org>
---
 roles/koji_hub/templates/hub.conf.j2 | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/roles/koji_hub/templates/hub.conf.j2 b/roles/koji_hub/templates/hub.conf.j2
index 44ac1edf45..dbc9fc452b 100644
--- a/roles/koji_hub/templates/hub.conf.j2
+++ b/roles/koji_hub/templates/hub.conf.j2
@@ -149,6 +149,12 @@ tag =
     tag *infra* && fromtag *infra* && has_perm infra :: allow
     fromtag *infra* :: deny
     all :: allow
+# This rule is to make sure OpenH264 builds never make it to inappropriate tags
+    package openh264 :: {
+        tag *-openh264 :: allow
+        is_sidetag && is_sidetag_owner :: allow
+        all :: deny Tagging OpenH264 to non-openh264 tags is forbidden.
+    }
 
 channel =
     method osbuildImage :: use osbuild