#6482: fix bodhi buildroot overrides with secure-boot packages -----------------------------+------------------------ Reporter: kevin | Owner: rel-eng@… Type: task | Status: new Milestone: Fedora 25 Alpha | Component: koji Keywords: meeting | Blocked By: Blocking: | -----------------------------+------------------------ Currently if you try and make a bodhi buildroot override with any of the packages in the 'secure-boot' koji permission it fails with a:
"Override : Unable to save buildroot override: policy violation (tag)"
This is because the bodhi user doesn't have 'secure-boot' perms in koji and the hub permissions require that to tag a package in that list.
Options to fix:
* Grant bodhi the 'secure-boot' permission. This should fix this issue, but is it granting it too many perms?
* Adjust the koji hub permissions so that bodhi is allowed to add secure- boot packages only to *override tags.
* Some other solution.
Note that bodhi does have the 'admin' permission in koji currently, so it could also just --force the tag, but it's desired to actually remove this permission from bodhi so I didn't list that as a solution.