On 2020-09-10 13:40, Mattia Rizzolo wrote: > Source: policy-rcd-declarative > Version: 0.3 > Severity: wishlist > X-Debbugs-Cc: Debian Buildd Team <[email protected]> > > > Dear maintainer, > > The buildd.d.o team took up on your experiment and started using this > package in place of dropping a file in the chroots' /usr/local/sbin. > > See: > > https://salsa.debian.org/dsa-team/mirror/dsa-puppet/-/commit/abacce72bdc2417961cab2704ef3881f6d15d654 > https://bugs.debian.org/969084 > > In that bug I propose a further improvement, that is to provide the > deny-all configuration from a package instead of having the > configuration file manually managed. > > Could you please add a binary package (that I tentatively named > policy-rcd-declarative-deny-all) providing a conffile > /etc/service-policy.d/99-buildd-deny-all > with the content > .* .* deny > ? > (I named the file 99 so that the users can place their overrides first.)
Note that the file should have a .pol extension to be considered. Regards, Aurelien -- Aurelien Jarno GPG: 4096R/1DDD8C9B [email protected] http://www.aurel32.net
signature.asc
Description: PGP signature
