Salt - caching proxy - Make sure that configuration is correctly prepended to policy file

This commit is contained in:
unman 2024-04-01 00:08:33 +00:00
parent c1a47ddd11
commit 1cda4ca0d7
No known key found for this signature in database
GPG Key ID: FDD1B8244731B36C
2 changed files with 5 additions and 1 deletions

View File

@ -1,6 +1,6 @@
Name: 3isec-qubes-cacher
Version: 1.15
Release: 1%{?dist}
Release: 2%{?dist}
Summary: A caching proxy in Qubes
License: GPLv3+
@ -79,6 +79,7 @@ if [ $1 -eq 1 ]; then
qubesctl state.apply cacher.use
qubesctl --skip-dom0 --templates state.apply cacher.change_templates
elif [ $1 -eq 2 ]; then
qubesctl state.apply cacher.use
qubesctl --skip-dom0 --targets=template-cacher state.apply cacher.update
fi
@ -96,6 +97,8 @@ if [ $1 -eq 0 ]; then
fi
%changelog
* Sun Mar 31 2024 unman <unman@thirdeyesecurity.org> - 1.15.2
- Make sure that configuration is correctly prepended to policy file.
* Thu Feb 22 2024 unman <unman@thirdeyesecurity.org> - 1.15
- Bug fix
* Sat Feb 10 2024 unman <unman@thirdeyesecurity.org> - 1.14

View File

@ -6,6 +6,7 @@ qvm-present-id:
/etc/qubes/policy.d/50-config-updates.policy:
file.prepend:
- header: True
- text:
- "qubes.UpdatesProxy * @tag:whonix-updatevm @default allow target=sys-whonix"
- "qubes.UpdatesProxy * @tag:whonix-updatevm @anyvm deny"