Merge pull request #254 from freedomofpress/rpc-policy-gpg-key-import

rpc policies: allow sd-svs to get sd-gpg to import gpg keys
freedomofpress · May 14, 2019 · b30a2d1 · b30a2d1
2 parents 28ef754 + 3770e7d
commit b30a2d1
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/dom0/sd-dom0-qvm-rpc.sls b/dom0/sd-dom0-qvm-rpc.sls
@@ -108,4 +108,5 @@ dom0-rpc-qubes.GpgImportKey:
     - marker_start: "### BEGIN securedrop-workstation ###"
     - marker_end: "### END securedrop-workstation ###"
     - content: |
+        sd-svs sd-gpg allow
         $anyvm $tag:sd-workstation deny
diff --git a/tests/vars/qubes-rpc.yml b/tests/vars/qubes-rpc.yml
@@ -56,6 +56,7 @@
 - policy: GpgImportKey
   starts_with: |-
     ### BEGIN securedrop-workstation ###
+    sd-svs sd-gpg allow
     $anyvm $tag:sd-workstation deny
     ### END securedrop-workstation ###