Git-Mirrors/shaker
1
0
Fork 0
mirror of https://github.com/unman/shaker.git synced 2024-12-11 16:54:22 -05:00
Code Issues Packages Projects Releases Wiki Activity

Salt - caching proxy - Make sure that configuration is correctly prepended to policy file

Browse Source
This commit is contained in:
unman 2024-04-01 00:08:33 +00:00
parent c1a47ddd11
commit 1cda4ca0d7
No known key found for this signature in database
GPG Key ID: FDD1B8244731B36C
2 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
cacher.spec
View File

@ -1,6 +1,6 @@
Name: 3isec-qubes-cacher Name: 3isec-qubes-cacher
Version: 1.15 Version: 1.15
Release: 1%{?dist} Release: 2%{?dist}
Summary: A caching proxy in Qubes Summary: A caching proxy in Qubes
License: GPLv3+ License: GPLv3+
@ -79,6 +79,7 @@ if [ $1 -eq 1 ]; then
qubesctl state.apply cacher.use qubesctl state.apply cacher.use
qubesctl --skip-dom0 --templates state.apply cacher.change_templates qubesctl --skip-dom0 --templates state.apply cacher.change_templates
elif [ $1 -eq 2 ]; then elif [ $1 -eq 2 ]; then
qubesctl state.apply cacher.use
qubesctl --skip-dom0 --targets=template-cacher state.apply cacher.update qubesctl --skip-dom0 --targets=template-cacher state.apply cacher.update
fi fi
@ -96,6 +97,8 @@ if [ $1 -eq 0 ]; then
fi fi
%changelog %changelog
* Sun Mar 31 2024 unman <unman@thirdeyesecurity.org> - 1.15.2
- Make sure that configuration is correctly prepended to policy file.
* Thu Feb 22 2024 unman <unman@thirdeyesecurity.org> - 1.15 * Thu Feb 22 2024 unman <unman@thirdeyesecurity.org> - 1.15
- Bug fix - Bug fix
* Sat Feb 10 2024 unman <unman@thirdeyesecurity.org> - 1.14 * Sat Feb 10 2024 unman <unman@thirdeyesecurity.org> - 1.14

1
cacher/use.sls
View File

@ -6,6 +6,7 @@ qvm-present-id:
/etc/qubes/policy.d/50-config-updates.policy: /etc/qubes/policy.d/50-config-updates.policy:
file.prepend: file.prepend:
- header: True
- text: - text:
- "qubes.UpdatesProxy * @tag:whonix-updatevm @default allow target=sys-whonix" - "qubes.UpdatesProxy * @tag:whonix-updatevm @default allow target=sys-whonix"
- "qubes.UpdatesProxy * @tag:whonix-updatevm @anyvm deny" - "qubes.UpdatesProxy * @tag:whonix-updatevm @anyvm deny"