Git-Mirrors/qusal
1
0
Fork 0
mirror of https://github.com/ben-grande/qusal.git synced 2025-06-06 22:08:57 -04:00
Code Issues Projects Releases Packages Wiki Activity

fix: GUI Global Config precedes packaged policies

Browse source
This commit is contained in:
Ben Grande 2024-06-17 11:36:39 +02:00
parent faa00fbffa
commit 59e8fc32a0
No known key found for this signature in database
GPG key ID: 00C64E14F51F9E56
3 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

4
salt/sys-bitcoin/create.sls
View file

@ -279,4 +279,6 @@ tags:
- name: qvm-volume extend dvm-bitcoin-builder:private 20Gi - name: qvm-volume extend dvm-bitcoin-builder:private 20Gi
{% from 'utils/macros/policy.sls' import policy_set with context -%} {% from 'utils/macros/policy.sls' import policy_set with context -%}
{{ policy_set(sls_path, '70') }} {{ policy_set(sls_path, '45') }}
{% from 'utils/macros/policy.sls' import policy_unset with context -%}
{{ policy_unset(sls_path, '70') }}

4
salt/sys-cacher/create.sls
View file

@ -97,10 +97,10 @@ features:
{%- endload %} {%- endload %}
{{ load(defaults) }} {{ load(defaults) }}
{% from 'utils/macros/policy.sls' import policy_unset with context -%}
{{ policy_unset(sls_path, '75') }}
{% from 'utils/macros/policy.sls' import policy_set with context -%} {% from 'utils/macros/policy.sls' import policy_set with context -%}
{{ policy_set(sls_path, '45') }} {{ policy_set(sls_path, '45') }}
{% from 'utils/macros/policy.sls' import policy_unset with context -%}
{{ policy_unset(sls_path, '75') }}
"{{ slsdotpath }}-extend-volume": "{{ slsdotpath }}-extend-volume":
cmd.run: cmd.run:

2
salt/sys-cacher/files/admin/policy/default.policy
View file

@ -8,8 +8,6 @@ qubes.OpenURL * {{ sls_path }} @default allow target={{ sls_path }}-browser
qubes.OpenURL * {{ sls_path }} @anyvm deny qubes.OpenURL * {{ sls_path }} @anyvm deny
qubes.ConnectTCP +8082 {{ sls_path }}-browser @default allow target={{ sls_path }} qubes.ConnectTCP +8082 {{ sls_path }}-browser @default allow target={{ sls_path }}
qubes.ConnectTCP * {{ sls_path }}-browser @anyvm deny qubes.ConnectTCP * {{ sls_path }}-browser @anyvm deny
qubes.UpdatesProxy * @tag:whonix-updatevm @default allow target=sys-whonix
qubes.UpdatesProxy * @tag:whonix-updatevm @anyvm deny
qubes.UpdatesProxy * @tag:updatevm-{{ sls_path }} @default allow target={{ sls_path }} qubes.UpdatesProxy * @tag:updatevm-{{ sls_path }} @default allow target={{ sls_path }}
qubes.UpdatesProxy * @tag:updatevm-{{ sls_path }} @anyvm deny qubes.UpdatesProxy * @tag:updatevm-{{ sls_path }} @anyvm deny
## vim:ft=qrexecpolicy ## vim:ft=qrexecpolicy