From dda7a6165b51a46d317aaaae52b3fb1e5e01645f Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Thu, 29 May 2014 17:33:41 +0000 Subject: [PATCH] Set facls for pesign to work with mock --- roles/bkernel/tasks/main.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/roles/bkernel/tasks/main.yml b/roles/bkernel/tasks/main.yml index 6be00533ee..a363a75f5b 100644 --- a/roles/bkernel/tasks/main.yml +++ b/roles/bkernel/tasks/main.yml @@ -29,3 +29,9 @@ - name: make sure our bkernel boxes have static ip template: src=bkernel-eth0-network dest=/etc/sysconfig/network-scripts/ifcfg-eth0 + +- name: set pesign facls to allow mockbuild user to use the socket directory + acl: name=/var/run/pesign entity=kojibuilder etype=user permissions='rx' + +- name: set pesign facls to allow mockbuild user to use the socket. + acl: name=/var/run/pesign/socket entity=kojibuilder etype=user permissions='rw'