#6482: fix bodhi buildroot overrides with secure-boot packages
-----------------------------+------------------------
Reporter: kevin | Owner: rel-eng@…
Type: task | Status: new
Milestone: Fedora 25 Alpha | Component: koji
Keywords: meeting | Blocked By:
Blocking: |
-----------------------------+------------------------
Currently if you try and make a bodhi buildroot override with any of the
packages in the 'secure-boot' koji permission it fails with a:
"Override : Unable to save buildroot override: policy violation (tag)"
This is because the bodhi user doesn't have 'secure-boot' perms in koji
and the hub permissions require that to tag a package in that list.
Options to fix:
* Grant bodhi the 'secure-boot' permission. This should fix this issue,
but is it granting it too many perms?
* Adjust the koji hub permissions so that bodhi is allowed to add secure-
boot packages only to *override tags.
* Some other solution.
Note that bodhi does have the 'admin' permission in koji currently, so it
could also just --force the tag, but it's desired to actually remove this
permission from bodhi so I didn't list that as a solution.
--
Ticket URL: <
https://fedorahosted.org/rel-eng/ticket/6482>
Fedora Release Engineering <
http://fedorahosted.org/rel-eng>
Release Engineering for the Fedora Project