policy-daemon: invalidate cache on file move too

Invalidate cache not only when file is modified inside policy dir, but also when it's moved in or out.
QubesOS · Jun 27, 2024 · 1a5cf9d · 1a5cf9d
1 parent c17ee39
commit 1a5cf9d
Showing 1 changed file with 13 additions and 1 deletion.
diff --git a/qrexec/policy/utils.py b/qrexec/policy/utils.py
@@ -48,7 +48,13 @@ def initialize_watcher(self):
         self.watch_manager = pyinotify.WatchManager()
 
         # pylint: disable=no-member
-        mask = pyinotify.IN_CREATE | pyinotify.IN_DELETE | pyinotify.IN_MODIFY
+        mask = (
+            pyinotify.IN_CREATE |
+            pyinotify.IN_DELETE |
+            pyinotify.IN_MODIFY |
+            pyinotify.IN_MOVED_FROM |
+            pyinotify.IN_MOVED_TO
+        )
 
         loop = asyncio.get_event_loop()
 
@@ -105,3 +111,9 @@ def process_IN_DELETE(self, _):
 
     def process_IN_MODIFY(self, _):
         self.cache.outdated = True
+
+    def process_IN_MOVED_TO(self, _):
+        self.cache.outdated = True
+
+    def process_IN_MOVED_FROM(self, _):
+        self.cache.outdated = True