infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

bkernel: set pesign perms with acl instead of user/group

Browse source 
We have to use acls here because the mock chroot has it's own user/group
files and it dynamically adds users, but if we use acls it will look up
the user and do the right thing because the name is the same.
(Hopefully)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2023-02-01 10:36:37 -08:00
parent 50f413c3eb
commit 4e23d73129
1 changed files with 1 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

7
roles/bkernel/tasks/main.yml
View file

@ -35,12 +35,7 @@
- bkernel
- name: /var/run/pesign directory perms
file: state=directory path=/var/run/pesign owner=pesign group=kojibuilder mode=0770
tags:
- bkernel
- name: /var/run/pesign socket perms
file: path=/var/run/pesign/socket owner=pesign group=kojibuilder mode=0660
acl: path=/var/run/pesign default=true entity=kojibuilder etype=group permissions=rwx recursive=true state=present
tags:
- bkernel