From 846105ee6e6bb0045d6edd1224f2042adeeb65c7 Mon Sep 17 00:00:00 2001 From: Erik Moeller Date: Fri, 10 Apr 2020 15:06:32 -0700 Subject: [PATCH] Add @default rule so qvm-copy works --- dom0/sd-dom0-qvm-rpc.sls | 1 + tests/vars/qubes-rpc.yml | 1 + 2 files changed, 2 insertions(+) diff --git a/dom0/sd-dom0-qvm-rpc.sls b/dom0/sd-dom0-qvm-rpc.sls index 216a8673..6af7d1df 100644 --- a/dom0/sd-dom0-qvm-rpc.sls +++ b/dom0/sd-dom0-qvm-rpc.sls @@ -37,6 +37,7 @@ dom0-rpc-qubes.Filecopy: - marker_start: "### BEGIN securedrop-workstation ###" - marker_end: "### END securedrop-workstation ###" - content: | + sd-log @default ask sd-log @tag:receive-sd-logs ask sd-proxy @tag:sd-client allow @anyvm @tag:sd-workstation deny diff --git a/tests/vars/qubes-rpc.yml b/tests/vars/qubes-rpc.yml index 6ed3c507..30d717ac 100644 --- a/tests/vars/qubes-rpc.yml +++ b/tests/vars/qubes-rpc.yml @@ -17,6 +17,7 @@ - policy: qubes.Filecopy starts_with: |- ### BEGIN securedrop-workstation ### + sd-log @default ask sd-log @tag:receive-sd-logs ask sd-proxy @tag:sd-client allow @anyvm @tag:sd-workstation deny