tainted-objects (cleanup): Check policy-query-supported-ssh value

Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>

1 files changed, 3 insertions, 0 deletions

diff --git a/dgit b/dgit
index db576a7..4bb0325 100755
--- a/dgit
+++ b/dgit
@@ -4871,6 +4871,9 @@ ENDT
 
     # Try to detect if we're about to be rejected due to tainted objects
     my $pq_supported = access_cfg 'policy-query-supported-ssh';
+    $pq_supported =~ m{^(?:false|true|unknown)$} or badcfg f_
+      "policy-query-supported-ssh value '%s' must be false/true/unknown",
+      $pq_supported;
     if ($pq_supported !~ m/false/) {
 	my @cmd =
 	  (access_cfg_ssh, access_gituserhost(),