new-security-install: run process-policy after we acquired the lock

We don't want cron.unchecked to do anything while we run process-policy.
Especially not running another process-policy process or moving files
out of queue/accepted/ while we are installing files there.

diff --git a/dak/new_security_install.py b/dak/new_security_install.py
index 251f34fe6c16f9cc42a417004f6eba362690e25d..aa2928db71bef54f63fb990b80563c59502b92b2 100755 (executable)
--- a/dak/new_security_install.py
+++ b/dak/new_security_install.py
@@ -86,10 +86,6 @@ def sudo(arg, fn, exit):
 
 def do_Approve(): sudo("A", _do_Approve, True)
 def _do_Approve():
-    # 1. use process-policy to go through the COMMENTS dir
-    spawn("dak process-policy embargoed")
-    spawn("dak process-policy unembargoed")
-
     print "Locking unchecked"
     lockfile='/srv/security-master.debian.org/lock/unchecked.lock'
     spawn("lockfile -r42 {0}".format(lockfile))