From 82dbb295117b0cf7687ea516df94ee279abe4ceb Mon Sep 17 00:00:00 2001
From: Jeremy Lecour <jlecour@evolix.fr>
Date: Mon, 22 Feb 2021 09:37:15 +0100
Subject: [PATCH] bkctld-upgrade-config: install check_policy template if
 missing

---
 CHANGELOG.md              |  1 +
 lib/bkctld-upgrade-config | 10 ++++++++++
 2 files changed, 11 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4e35f9d..a51c5dc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 
 * bkctld-init: install check_policy template
+* bkctld-upgrade-config: install check_policy template if missing
 * test: bkctld check-incs shouldn't fail without incs_policy file
 
 ### Changed
diff --git a/lib/bkctld-upgrade-config b/lib/bkctld-upgrade-config
index e835f7b..8d1b266 100755
--- a/lib/bkctld-upgrade-config
+++ b/lib/bkctld-upgrade-config
@@ -45,3 +45,13 @@ elif [ -f "${legacy_incs_policy_file}" ]; then
 
     info "${jail_name}: config has been upgraded"
 fi
+
+check_policy_file=$(jail_check_policy_file "${jail_name}")
+if [ ! -f "${check_policy_file}" ]; then
+    check_policy_tpl="${TPLDIR}/check_policy.tpl"
+    test -f "${LOCALTPLDIR}/check_policy.tpl" && check_policy_tpl="${LOCALTPLDIR}/check_policy.tpl"
+    mkdir --parents "$(dirname "${check_policy_file}")"
+    install -m 0640 "${check_policy_tpl}" "${check_policy_file}"
+
+    info "${jail_name}: check_policy template ha been installed"
+fi