From d7703ef8027700da4b2ced09f8e22d2a2573264c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 21 Jul 2026 12:53:01 +0200
Subject: [PATCH] global-functions: $ScriptInstallUpdate: support setting
 policy

---
 global-functions.rsc | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index ad981137..cd18cd6f 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1377,8 +1377,14 @@
       :continue;
     }
 
+    :local RequirePolicy ([ $ParseKeyValueStore [ $Grep $SourceNew ("\23 requires policy, ") ] ]->"policy");
+    :if ([ :len $RequirePolicy ] > 0) do={
+      :set ($ScriptVal->"policy") [ :toarray delimiter=";" $RequirePolicy ];
+      $LogPrintOnce debug $0 ("New policy for script '" . $ScriptVal->"name" . "': " . $RequirePolicy);
+    }
+
     $LogPrint info $0 ("Updating script: " . $ScriptVal->"name");
-    /system/script/set owner=($ScriptVal->"name") \
+    /system/script/set owner=($ScriptVal->"name") policy=($ScriptVal->"policy") \
         source=[ $IfThenElse ($ScriptUpdatesCRLF = true) $SourceCRLF $SourceNew ] $Script;
     :if ($ScriptVal->"name" = "global-config" || \
          $ScriptVal->"name" = "global-functions" || \