dkirwan/infra-ansible
1
0
Fork 0
forked from infra/ansible
Code Pull requests Activity

siguldry-pesign-bridge: put acls back for now

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2026-03-31 11:59:46 -07:00
commit bbd6f392ba
1 changed files with 28 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

28
roles/siguldry/pesign_bridge/tasks/main.yml
View file

@ -143,3 +143,31 @@
- services
- siguldry
- siguldry/pesign_bridge
- name: /run/pesign directory perms (kojibuilder)
acl: path=/run/pesign entity=kojibuilder etype=user permissions=rwx recursive=true state=present
when: "'secureboot' in group_names"
tags:
- siguldry
- siguldry/pesign_bridge
- name: /run/pesign directory perms (pesign)
acl: path=/run/pesign entity=pesign etype=user permissions=rwx recursive=true state=present
when: "'secureboot' in group_names"
tags:
- siguldry
- siguldry/pesign_bridge
- name: /run/pesign socket perms (kojibuilder)
acl: path=/run/pesign/socket entity=kojibuilder etype=user permissions=rwx recursive=true state=present
when: "'secureboot' in group_names"
tags:
- siguldry
- siguldry/pesign_bridge
- name: /run/pesign socket perms (pesign)
acl: path=/run/pesign/socket default=true entity=pesign etype=group permissions=rwx recursive=true state=present
when: "'secureboot' in group_names"
tags:
- siguldry
- siguldry/pesign_bridge