From ddc6fb16d6511ebe6c84f9d1372c7c1fed6cab19 Mon Sep 17 00:00:00 2001 From: Mohan Boddu Date: Thu, 18 Jun 2020 13:57:47 -0400 Subject: [PATCH] Adding perms to tag secure-boot packages to eln tags Signed-off-by: Mohan Boddu --- roles/koji_hub/templates/hub.conf.j2 | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/roles/koji_hub/templates/hub.conf.j2 b/roles/koji_hub/templates/hub.conf.j2 index 827e34f2d0..e776a524e4 100644 --- a/roles/koji_hub/templates/hub.conf.j2 +++ b/roles/koji_hub/templates/hub.conf.j2 @@ -100,7 +100,10 @@ tag = # as the coreos-release tag. https://pagure.io/releng/issue/8294 operation tag && tag coreos-pool f*-coreos-signing-pending coreos-release && has_perm coreos-continuous :: allow operation untag && fromtag coreos-pool f*-coreos-signing-pending coreos-release && has_perm coreos-continuous :: allow - # deny tagging secureboot packages that are not related to coreos-continuous + # eln and eln-rebuild builds, https://pagure.io/releng/issue/9538 + operation tag && tag eln eln-rebuild && has_perm eln :: allow + operation untag && fromtag eln eln-rebuild && has_perm eln :: allow + # deny tagging secureboot packages that are not related to coreos-continuous and eln package kernel shim grub2 pesign :: deny # Allow people to tag stuff into infra-candidate if they're infra tag *-infra-candidate && has_perm infra :: allow