]> git.decadent.org.uk Git - dak.git/commitdiff
new-security-install: run process-policy after we acquired the lock
authorAnsgar Burchardt <ansgar@debian.org>
Mon, 17 Jun 2013 18:17:53 +0000 (20:17 +0200)
committerAnsgar Burchardt <ansgar@debian.org>
Mon, 17 Jun 2013 18:17:53 +0000 (20:17 +0200)
We don't want cron.unchecked to do anything while we run process-policy.
Especially not running another process-policy process or moving files
out of queue/accepted/ while we are installing files there.

dak/new_security_install.py

index 251f34fe6c16f9cc42a417004f6eba362690e25d..aa2928db71bef54f63fb990b80563c59502b92b2 100755 (executable)
@@ -86,10 +86,6 @@ def sudo(arg, fn, exit):
 
 def do_Approve(): sudo("A", _do_Approve, True)
 def _do_Approve():
-    # 1. use process-policy to go through the COMMENTS dir
-    spawn("dak process-policy embargoed")
-    spawn("dak process-policy unembargoed")
-
     print "Locking unchecked"
     lockfile='/srv/security-master.debian.org/lock/unchecked.lock'
     spawn("lockfile -r42 {0}".format(lockfile))